n the Linux kernel, the following vulnerability has been resolved: vsock/virtio: Validate length in packet header before skb_put() When receiving a vsock packet in the guest, only the virtqueue buffer size is validated prior to virtio_vsock_skb_rx_put(). Unfortunately, virtio_vsock_skb_rx_put() uses the length from the packet header as the length argument to skb_put(), potentially resulting in SKB overflow if the host has gone wonky. Validate the length as advertised by the packet header before calling virtio_vsock_skb_rx_put().
07 Jan 2026, 19:34
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://git.kernel.org/stable/c/0dab92484474587b82e8e0455839eaf5ac7bf894 - Patch | |
| References | () https://git.kernel.org/stable/c/676f03760ca1d69c2470cef36c44dc152494b47c - Patch | |
| References | () https://git.kernel.org/stable/c/969b06bd8b7560efb100a34227619e7d318fbe05 - Patch | |
| References | () https://git.kernel.org/stable/c/ee438c492b2e0705d819ac0e25d04fae758d8f8f - Patch | |
| References | () https://git.kernel.org/stable/c/faf332a10372390ce65d0b803888f4b25a388335 - Patch | |
| References | () https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html - Third Party Advisory | |
| CPE | cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
| First Time |
Debian
Linux linux Kernel Linux Debian debian Linux |
|
| CWE | CWE-787 |
03 Nov 2025, 18:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
08 Sep 2025, 16:25
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Published : 2025-09-05 18:15
Updated : 2026-01-07 19:34
NVD link : CVE-2025-39718
Mitre link : CVE-2025-39718
CVE.ORG link : CVE-2025-39718
JSON object : View
Out-of-bounds Write