NetSight
IP …
high7.8

CVE-2025-38403

In the Linux kernel, the following vulnerability has been resolved: vsock/vmci: Clear the vmci transport packet properly when initializing it In vmci_transport…

Impact

In the Linux kernel, the following vulnerability has been resolved: vsock/vmci: Clear the vmci transport packet properly when initializing it In vmci_transport_packet_init memset the vmci_transport_packet before populating the fields to avoid any uninitialised data being left in the structure.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 3.9 before 5.4.296
from 5.5 before 5.10.240
from 5.11 before 5.15.187
from 5.16 before 6.1.144
from 6.2 before 6.6.97
from 6.7 before 6.12.37
DebianDebian Linux
Version 11.0

References