CVE-2024-53103 (GCVE-0-2024-53103)

Vulnerability from cvelistv5 – Published: 2024-12-02 07:29 – Updated: 2026-08-05 11:43
VLAI
Title
hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer
Summary
In the Linux kernel, the following vulnerability has been resolved: hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer When hvs is released, there is a possibility that vsk->trans may not be initialized to NULL, which could lead to a dangling pointer. This issue is resolved by initializing vsk->trans to NULL.
Severity
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
SSVC
Exploitation: none Automatable: no Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2025-10-01 20:11 UTC
CWE
Assigner
References
Impacted products
Vendor Product Version
Linux Linux Affected: ae0078fcf0a5eb3a8623bfb5f988262e0911fdb9 , < 285266ef92f7b4bf7d26e1e95e215ce6a6badb4a (git)
Affected: ae0078fcf0a5eb3a8623bfb5f988262e0911fdb9 , < 4fe1d42f2acc463b733bb42e3f8e67dbc2a0eb2d (git)
Affected: ae0078fcf0a5eb3a8623bfb5f988262e0911fdb9 , < 414476c4fb11be070c09ab8f3e75c9ee324a108a (git)
Affected: ae0078fcf0a5eb3a8623bfb5f988262e0911fdb9 , < 7cf25987820350cb950856c71b409e5b6eed52bd (git)
Affected: ae0078fcf0a5eb3a8623bfb5f988262e0911fdb9 , < 98d8dde9232250a57ad5ef16479bf6a349e09b80 (git)
Affected: ae0078fcf0a5eb3a8623bfb5f988262e0911fdb9 , < 4bdc5a62c6e50600d8a1c3e18fd6dce0c27c9497 (git)
Affected: ae0078fcf0a5eb3a8623bfb5f988262e0911fdb9 , < e0fe3392371293175f25028020ded5267f4cd8e3 (git)
Affected: ae0078fcf0a5eb3a8623bfb5f988262e0911fdb9 , < 8621725afb38e111969c64280b71480afde2aace (git)
Affected: ae0078fcf0a5eb3a8623bfb5f988262e0911fdb9 , < e629295bd60abf4da1db85b82819ca6a4f6c1e79 (git)
Create a notification for this product.
Linux Linux Affected: 4.14
Unaffected: 0 , < 4.14 (semver)
Unaffected: 4.19.324 , ≤ 4.19.* (semver)
Unaffected: 5.4.286 , ≤ 5.4.* (semver)
Unaffected: 5.10.230 , ≤ 5.10.* (semver)
Unaffected: 5.15.172 , ≤ 5.15.* (semver)
Unaffected: 6.1.117 , ≤ 6.1.* (semver)
Unaffected: 6.6.61 , ≤ 6.6.* (semver)
Unaffected: 6.11.8 , ≤ 6.11.* (semver)
Unaffected: 6.12.1 , ≤ 6.12.* (semver)
Unaffected: 6.13 , ≤ * (original_commit_for_fix)
Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-53103",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-10-01T20:11:01.150228Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-416",
                "description": "CWE-416 Use After Free",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-10-01T20:17:12.174Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T22:29:15.536Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/vmw_vsock/hyperv_transport.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "285266ef92f7b4bf7d26e1e95e215ce6a6badb4a",
              "status": "affected",
              "version": "ae0078fcf0a5eb3a8623bfb5f988262e0911fdb9",
              "versionType": "git"
            },
            {
              "lessThan": "4fe1d42f2acc463b733bb42e3f8e67dbc2a0eb2d",
              "status": "affected",
              "version": "ae0078fcf0a5eb3a8623bfb5f988262e0911fdb9",
              "versionType": "git"
            },
            {
              "lessThan": "414476c4fb11be070c09ab8f3e75c9ee324a108a",
              "status": "affected",
              "version": "ae0078fcf0a5eb3a8623bfb5f988262e0911fdb9",
              "versionType": "git"
            },
            {
              "lessThan": "7cf25987820350cb950856c71b409e5b6eed52bd",
              "status": "affected",
              "version": "ae0078fcf0a5eb3a8623bfb5f988262e0911fdb9",
              "versionType": "git"
            },
            {
              "lessThan": "98d8dde9232250a57ad5ef16479bf6a349e09b80",
              "status": "affected",
              "version": "ae0078fcf0a5eb3a8623bfb5f988262e0911fdb9",
              "versionType": "git"
            },
            {
              "lessThan": "4bdc5a62c6e50600d8a1c3e18fd6dce0c27c9497",
              "status": "affected",
              "version": "ae0078fcf0a5eb3a8623bfb5f988262e0911fdb9",
              "versionType": "git"
            },
            {
              "lessThan": "e0fe3392371293175f25028020ded5267f4cd8e3",
              "status": "affected",
              "version": "ae0078fcf0a5eb3a8623bfb5f988262e0911fdb9",
              "versionType": "git"
            },
            {
              "lessThan": "8621725afb38e111969c64280b71480afde2aace",
              "status": "affected",
              "version": "ae0078fcf0a5eb3a8623bfb5f988262e0911fdb9",
              "versionType": "git"
            },
            {
              "lessThan": "e629295bd60abf4da1db85b82819ca6a4f6c1e79",
              "status": "affected",
              "version": "ae0078fcf0a5eb3a8623bfb5f988262e0911fdb9",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/vmw_vsock/hyperv_transport.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.14"
            },
            {
              "lessThan": "4.14",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.324",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.286",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.230",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.172",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.117",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.61",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.11.*",
              "status": "unaffected",
              "version": "6.11.8",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.13",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.324",
                  "versionStartIncluding": "4.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.286",
                  "versionStartIncluding": "4.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.230",
                  "versionStartIncluding": "4.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.172",
                  "versionStartIncluding": "4.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.117",
                  "versionStartIncluding": "4.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.61",
                  "versionStartIncluding": "4.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.11.8",
                  "versionStartIncluding": "4.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.1",
                  "versionStartIncluding": "4.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.13",
                  "versionStartIncluding": "4.14",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nhv_sock: Initializing vsk-\u003etrans to NULL to prevent a dangling pointer\n\nWhen hvs is released, there is a possibility that vsk-\u003etrans may not\nbe initialized to NULL, which could lead to a dangling pointer.\nThis issue is resolved by initializing vsk-\u003etrans to NULL."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The vulnerable code is reached through the AF_VSOCK socket API (`socket()`/`connect()`) from a local process in the guest; there is no path that lets a remote or adjacent peer drive the transport reassignment. Per kernel scoring convention vsock bugs are Local.\nAC:L - The attacker fully controls the trigger sequence \u2014 `connect()` to VMADDR_CID_HOST to get the hv_sock transport, self-delivered signal (alarm/timer) to force the `SS_UNCONNECTED`/`TCP_CLOSING` state at af_vsock.c:1524, then `connect()` to VMADDR_CID_LOCAL to force `hvs_destruct()` \u2014 and can retry the sequence indefinitely with cheap, attacker-controlled heap grooming.\nPR:L - `vsock_create()` performs no capability check, so any unprivileged local user can create AF_VSOCK sockets and drive `vsock_connect()`; the required hv_sock and vsock_loopback modules are autoloaded by that unprivileged `socket()` call via MODULE_ALIAS_NETPROTO(PF_VSOCK).\nUI:N - The entire sequence is performed by the attacker\u0027s own process through ordinary syscalls; no action by any other user or administrator is needed.\nS:U - The dangling `struct hvsock` and the corrupted kernel heap are within the guest kernel\u0027s own security authority; hv_sock is the guest-side transport, so there is no crossing into the Hyper-V host or another VM.\nC:H - A dangling `vsk-\u003etrans` gives a use-after-free on a kmalloc\u0027d `struct hvsock`; reclaiming that slot with attacker-chosen data and having `hvs_stream_dequeue()`/`hvs_update_recv_data()` read through the stale `recv_desc`/`recv_data_off`/`recv_data_len` fields yields controlled kernel memory disclosure into userspace.\nI:H - The same UAF is a write primitive \u2014 `hvs_open_connection()` does `hvs-\u003echan = chan` and `hvs_update_recv_data()` writes `recv_data_len`/`recv_data_off` into the freed object, so heap spraying over the reclaimed slot allows corruption of an adjacent/overlapping kernel object and control-flow hijacking.\nA:H - Even without successful exploitation the stale pointer causes dereference of freed memory (or a NULL `vsk-\u003etransport` deref from `hvs_close_timeout` \u2192 `vsock_stream_has_data()`), producing a kernel oops/panic that an unprivileged user can trigger repeatedly."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T11:43:43.359Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/285266ef92f7b4bf7d26e1e95e215ce6a6badb4a"
        },
        {
          "url": "https://git.kernel.org/stable/c/4fe1d42f2acc463b733bb42e3f8e67dbc2a0eb2d"
        },
        {
          "url": "https://git.kernel.org/stable/c/414476c4fb11be070c09ab8f3e75c9ee324a108a"
        },
        {
          "url": "https://git.kernel.org/stable/c/7cf25987820350cb950856c71b409e5b6eed52bd"
        },
        {
          "url": "https://git.kernel.org/stable/c/98d8dde9232250a57ad5ef16479bf6a349e09b80"
        },
        {
          "url": "https://git.kernel.org/stable/c/4bdc5a62c6e50600d8a1c3e18fd6dce0c27c9497"
        },
        {
          "url": "https://git.kernel.org/stable/c/e0fe3392371293175f25028020ded5267f4cd8e3"
        },
        {
          "url": "https://git.kernel.org/stable/c/8621725afb38e111969c64280b71480afde2aace"
        },
        {
          "url": "https://git.kernel.org/stable/c/e629295bd60abf4da1db85b82819ca6a4f6c1e79"
        }
      ],
      "title": "hv_sock: Initializing vsk-\u003etrans to NULL to prevent a dangling pointer",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-53103",
    "datePublished": "2024-12-02T07:29:26.450Z",
    "dateReserved": "2024-11-19T17:17:24.984Z",
    "dateUpdated": "2026-08-05T11:43:43.359Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2024-53103",
      "date": "2026-10-02",
      "epss": "0.00238",
      "percentile": "0.13426"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "product": "Linux",
                "programFiles": [
                  "net/vmw_vsock/hyperv_transport.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "lessThan": "285266ef92f7b4bf7d26e1e95e215ce6a6badb4a",
                    "status": "affected",
                    "version": "ae0078fcf0a5eb3a8623bfb5f988262e0911fdb9",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "4fe1d42f2acc463b733bb42e3f8e67dbc2a0eb2d",
                    "status": "affected",
                    "version": "ae0078fcf0a5eb3a8623bfb5f988262e0911fdb9",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "414476c4fb11be070c09ab8f3e75c9ee324a108a",
                    "status": "affected",
                    "version": "ae0078fcf0a5eb3a8623bfb5f988262e0911fdb9",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "7cf25987820350cb950856c71b409e5b6eed52bd",
                    "status": "affected",
                    "version": "ae0078fcf0a5eb3a8623bfb5f988262e0911fdb9",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "98d8dde9232250a57ad5ef16479bf6a349e09b80",
                    "status": "affected",
                    "version": "ae0078fcf0a5eb3a8623bfb5f988262e0911fdb9",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "4bdc5a62c6e50600d8a1c3e18fd6dce0c27c9497",
                    "status": "affected",
                    "version": "ae0078fcf0a5eb3a8623bfb5f988262e0911fdb9",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "e0fe3392371293175f25028020ded5267f4cd8e3",
                    "status": "affected",
                    "version": "ae0078fcf0a5eb3a8623bfb5f988262e0911fdb9",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "8621725afb38e111969c64280b71480afde2aace",
                    "status": "affected",
                    "version": "ae0078fcf0a5eb3a8623bfb5f988262e0911fdb9",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "e629295bd60abf4da1db85b82819ca6a4f6c1e79",
                    "status": "affected",
                    "version": "ae0078fcf0a5eb3a8623bfb5f988262e0911fdb9",
                    "versionType": "git"
                  }
                ]
              },
              {
                "defaultStatus": "affected",
                "product": "Linux",
                "programFiles": [
                  "net/vmw_vsock/hyperv_transport.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "status": "affected",
                    "version": "4.14"
                  },
                  {
                    "lessThan": "4.14",
                    "status": "unaffected",
                    "version": "0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "4.19.*",
                    "status": "unaffected",
                    "version": "4.19.324",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.4.*",
                    "status": "unaffected",
                    "version": "5.4.286",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.10.*",
                    "status": "unaffected",
                    "version": "5.10.230",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.15.*",
                    "status": "unaffected",
                    "version": "5.15.172",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.1.*",
                    "status": "unaffected",
                    "version": "6.1.117",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.6.*",
                    "status": "unaffected",
                    "version": "6.6.61",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.11.*",
                    "status": "unaffected",
                    "version": "6.11.8",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.12.*",
                    "status": "unaffected",
                    "version": "6.12.1",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "*",
                    "status": "unaffected",
                    "version": "6.13",
                    "versionType": "original_commit_for_fix"
                  }
                ]
              }
            ],
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
          }
        ],
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "0EBF3108-DBF4-4E6D-B699-384F2299858B",
                    "versionEndExcluding": "4.19.324",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "9952C897-8A61-4D4B-9D6D-7D063E9EA15E",
                    "versionEndExcluding": "5.4.286",
                    "versionStartIncluding": "4.20",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "BF5B32D0-72C9-41C3-A0BB-D4946153C134",
                    "versionEndExcluding": "5.10.230",
                    "versionStartIncluding": "5.5",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "88812664-4296-42AC-AE0F-ED71086C1BB1",
                    "versionEndExcluding": "5.15.172",
                    "versionStartIncluding": "5.11",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "0DD7F755-2F6B-4707-8973-78496AD5AA8E",
                    "versionEndExcluding": "6.1.117",
                    "versionStartIncluding": "5.16",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "630ED7EB-C97E-4435-B884-1E309E40D6F3",
                    "versionEndExcluding": "6.6.61",
                    "versionStartIncluding": "6.2",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "0BD000F7-3DAD-4DD3-8906-98EA1EC67E95",
                    "versionEndExcluding": "6.11.8",
                    "versionStartIncluding": "6.7",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:6.12:-:*:*:*:*:*:*",
                    "matchCriteriaId": "0E698080-7669-4132-8817-4C674EEBCE54",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:*",
                    "matchCriteriaId": "7F361E1D-580F-4A2D-A509-7615F73167A1",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:6.12:rc2:*:*:*:*:*:*",
                    "matchCriteriaId": "925478D0-3E3D-4E6F-ACD5-09F28D5DF82C",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:6.12:rc3:*:*:*:*:*:*",
                    "matchCriteriaId": "3C95E234-D335-4B6C-96BF-E2CEBD8654ED",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:6.12:rc4:*:*:*:*:*:*",
                    "matchCriteriaId": "E0F717D8-3014-4F84-8086-0124B2111379",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:6.12:rc5:*:*:*:*:*:*",
                    "matchCriteriaId": "24DBE6C7-2AAE-4818-AED2-E131F153D2FA",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:6.12:rc6:*:*:*:*:*:*",
                    "matchCriteriaId": "24B88717-53F5-42AA-9B72-14C707639E3F",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:6.12:rc7:*:*:*:*:*:*",
                    "matchCriteriaId": "1EF8CD82-1EAE-4254-9545-F85AB94CF90F",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nhv_sock: Initializing vsk-\u003etrans to NULL to prevent a dangling pointer\n\nWhen hvs is released, there is a possibility that vsk-\u003etrans may not\nbe initialized to NULL, which could lead to a dangling pointer.\nThis issue is resolved by initializing vsk-\u003etrans to NULL."
          },
          {
            "lang": "es",
            "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: hv_sock: inicializaci\u00f3n de vsk-\u0026gt;trans en NULL para evitar un puntero colgante. Cuando se lanza hvs, existe la posibilidad de que vsk-\u0026gt;trans no se inicialice en NULL, lo que podr\u00eda provocar un puntero colgante. Este problema se resuelve inicializando vsk-\u0026gt;trans en NULL."
          }
        ],
        "id": "CVE-2024-53103",
        "lastModified": "2026-06-17T08:08:16.980",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.8,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 1.8,
              "impactScore": 5.9,
              "source": "nvd@nist.gov",
              "type": "Primary"
            },
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.8,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 1.8,
              "impactScore": 5.9,
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "type": "Secondary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2024-53103",
                "options": [
                  {
                    "exploitation": "none"
                  },
                  {
                    "automatable": "no"
                  },
                  {
                    "technicalImpact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-10-01T20:11:01.150228Z",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2024-12-02T08:15:08.537",
        "references": [
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/285266ef92f7b4bf7d26e1e95e215ce6a6badb4a"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/414476c4fb11be070c09ab8f3e75c9ee324a108a"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/4bdc5a62c6e50600d8a1c3e18fd6dce0c27c9497"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/4fe1d42f2acc463b733bb42e3f8e67dbc2a0eb2d"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/7cf25987820350cb950856c71b409e5b6eed52bd"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/8621725afb38e111969c64280b71480afde2aace"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/98d8dde9232250a57ad5ef16479bf6a349e09b80"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/e0fe3392371293175f25028020ded5267f4cd8e3"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/e629295bd60abf4da1db85b82819ca6a4f6c1e79"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html"
          }
        ],
        "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-416"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          },
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-416"
              }
            ],
            "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
            "type": "Secondary"
          }
        ]
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-09-28T09:04:29+00:00",
      "cve": "CVE-2024-53103",
      "id": "CVE-2024-53103",
      "initial_release_date": "2024-12-02T00:00:00+00:00",
      "product_status:fixed": "305",
      "product_status:known_affected": "98",
      "product_status:known_not_affected": "14",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: hv_sock: Initializing vsk-\u003etrans to NULL to prevent a dangling pointer",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-53103.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "cvssV3_1": {
                  "attackComplexity": "LOW",
                  "attackVector": "LOCAL",
                  "availabilityImpact": "HIGH",
                  "baseScore": 7.8,
                  "baseSeverity": "HIGH",
                  "confidentialityImpact": "HIGH",
                  "integrityImpact": "HIGH",
                  "privilegesRequired": "LOW",
                  "scope": "UNCHANGED",
                  "userInteraction": "NONE",
                  "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "version": "3.1"
                }
              },
              {
                "other": {
                  "content": {
                    "id": "CVE-2024-53103",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2025-10-01T20:11:01.150228Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-416",
                    "description": "CWE-416 Use After Free",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2025-10-01T15:33:09.747Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "Linux",
              "programFiles": [
                "net/vmw_vsock/hyperv_transport.c"
              ],
              "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
              "vendor": "Linux",
              "versions": [
                {
                  "lessThan": "285266ef92f7b4bf7d26e1e95e215ce6a6badb4a",
                  "status": "affected",
                  "version": "ae0078fcf0a5eb3a8623bfb5f988262e0911fdb9",
                  "versionType": "git"
                },
                {
                  "lessThan": "4fe1d42f2acc463b733bb42e3f8e67dbc2a0eb2d",
                  "status": "affected",
                  "version": "ae0078fcf0a5eb3a8623bfb5f988262e0911fdb9",
                  "versionType": "git"
                },
                {
                  "lessThan": "414476c4fb11be070c09ab8f3e75c9ee324a108a",
                  "status": "affected",
                  "version": "ae0078fcf0a5eb3a8623bfb5f988262e0911fdb9",
                  "versionType": "git"
                },
                {
                  "lessThan": "7cf25987820350cb950856c71b409e5b6eed52bd",
                  "status": "affected",
                  "version": "ae0078fcf0a5eb3a8623bfb5f988262e0911fdb9",
                  "versionType": "git"
                },
                {
                  "lessThan": "98d8dde9232250a57ad5ef16479bf6a349e09b80",
                  "status": "affected",
                  "version": "ae0078fcf0a5eb3a8623bfb5f988262e0911fdb9",
                  "versionType": "git"
                },
                {
                  "lessThan": "4bdc5a62c6e50600d8a1c3e18fd6dce0c27c9497",
                  "status": "affected",
                  "version": "ae0078fcf0a5eb3a8623bfb5f988262e0911fdb9",
                  "versionType": "git"
                },
                {
                  "lessThan": "e0fe3392371293175f25028020ded5267f4cd8e3",
                  "status": "affected",
                  "version": "ae0078fcf0a5eb3a8623bfb5f988262e0911fdb9",
                  "versionType": "git"
                },
                {
                  "lessThan": "8621725afb38e111969c64280b71480afde2aace",
                  "status": "affected",
                  "version": "ae0078fcf0a5eb3a8623bfb5f988262e0911fdb9",
                  "versionType": "git"
                },
                {
                  "lessThan": "e629295bd60abf4da1db85b82819ca6a4f6c1e79",
                  "status": "affected",
                  "version": "ae0078fcf0a5eb3a8623bfb5f988262e0911fdb9",
                  "versionType": "git"
                }
              ]
            },
            {
              "defaultStatus": "affected",
              "product": "Linux",
              "programFiles": [
                "net/vmw_vsock/hyperv_transport.c"
              ],
              "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
              "vendor": "Linux",
              "versions": [
                {
                  "status": "affected",
                  "version": "4.14"
                },
                {
                  "lessThan": "4.14",
                  "status": "unaffected",
                  "version": "0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "4.19.*",
                  "status": "unaffected",
                  "version": "4.19.324",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "5.4.*",
                  "status": "unaffected",
                  "version": "5.4.286",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "5.10.*",
                  "status": "unaffected",
                  "version": "5.10.230",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "5.15.*",
                  "status": "unaffected",
                  "version": "5.15.172",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "6.1.*",
                  "status": "unaffected",
                  "version": "6.1.117",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "6.6.*",
                  "status": "unaffected",
                  "version": "6.6.61",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "6.11.*",
                  "status": "unaffected",
                  "version": "6.11.8",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "6.12.*",
                  "status": "unaffected",
                  "version": "6.12.1",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "*",
                  "status": "unaffected",
                  "version": "6.13",
                  "versionType": "original_commit_for_fix"
                }
              ]
            }
          ],
          "cpeApplicability": [
            {
              "nodes": [
                {
                  "cpeMatch": [
                    {
                      "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                      "versionEndExcluding": "4.19.324",
                      "versionStartIncluding": "4.14",
                      "vulnerable": true
                    },
                    {
                      "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                      "versionEndExcluding": "5.4.286",
                      "versionStartIncluding": "4.14",
                      "vulnerable": true
                    },
                    {
                      "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                      "versionEndExcluding": "5.10.230",
                      "versionStartIncluding": "4.14",
                      "vulnerable": true
                    },
                    {
                      "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                      "versionEndExcluding": "5.15.172",
                      "versionStartIncluding": "4.14",
                      "vulnerable": true
                    },
                    {
                      "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                      "versionEndExcluding": "6.1.117",
                      "versionStartIncluding": "4.14",
                      "vulnerable": true
                    },
                    {
                      "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                      "versionEndExcluding": "6.6.61",
                      "versionStartIncluding": "4.14",
                      "vulnerable": true
                    },
                    {
                      "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                      "versionEndExcluding": "6.11.8",
                      "versionStartIncluding": "4.14",
                      "vulnerable": true
                    },
                    {
                      "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                      "versionEndExcluding": "6.12.1",
                      "versionStartIncluding": "4.14",
                      "vulnerable": true
                    },
                    {
                      "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                      "versionEndExcluding": "6.13",
                      "versionStartIncluding": "4.14",
                      "vulnerable": true
                    }
                  ],
                  "negate": false,
                  "operator": "OR"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nhv_sock: Initializing vsk-\u003etrans to NULL to prevent a dangling pointer\n\nWhen hvs is released, there is a possibility that vsk-\u003etrans may not\nbe initialized to NULL, which could lead to a dangling pointer.\nThis issue is resolved by initializing vsk-\u003etrans to NULL."
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2025-05-04T09:53:06.183Z",
            "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "shortName": "Linux"
          },
          "references": [
            {
              "url": "https://git.kernel.org/stable/c/285266ef92f7b4bf7d26e1e95e215ce6a6badb4a"
            },
            {
              "url": "https://git.kernel.org/stable/c/4fe1d42f2acc463b733bb42e3f8e67dbc2a0eb2d"
            },
            {
              "url": "https://git.kernel.org/stable/c/414476c4fb11be070c09ab8f3e75c9ee324a108a"
            },
            {
              "url": "https://git.kernel.org/stable/c/7cf25987820350cb950856c71b409e5b6eed52bd"
            },
            {
              "url": "https://git.kernel.org/stable/c/98d8dde9232250a57ad5ef16479bf6a349e09b80"
            },
            {
              "url": "https://git.kernel.org/stable/c/4bdc5a62c6e50600d8a1c3e18fd6dce0c27c9497"
            },
            {
              "url": "https://git.kernel.org/stable/c/e0fe3392371293175f25028020ded5267f4cd8e3"
            },
            {
              "url": "https://git.kernel.org/stable/c/8621725afb38e111969c64280b71480afde2aace"
            },
            {
              "url": "https://git.kernel.org/stable/c/e629295bd60abf4da1db85b82819ca6a4f6c1e79"
            }
          ],
          "title": "hv_sock: Initializing vsk-\u003etrans to NULL to prevent a dangling pointer",
          "x_generator": {
            "engine": "bippy-1.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "assignerShortName": "Linux",
        "cveId": "CVE-2024-53103",
        "datePublished": "2024-12-02T07:29:26.450Z",
        "dateReserved": "2024-11-19T17:17:24.984Z",
        "dateUpdated": "2025-05-04T09:53:06.183Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.