CVE-2024-53119

Summary

CVE-2024-53119: A memory leak vulnerability was identified in the Linux kernel's virtio/vsock subsystem. During socket destruction, if virtio_transport_recv_listen() is called after the accept_queue has been flushed but before the SOCK_DONE flag has been set, new sockets could remain unremoved, leading to a memory leak. To address this issue, a check has been introduced to prevent vsock_enqueue_accept() during socket destruction. This vulnerability resulted in an unreferenced object of size 2040, with a hex dump and backtrace provided in the log.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.