{"id":"DEBIAN-CVE-2024-53119","details":"In the Linux kernel, the following vulnerability has been resolved:  virtio/vsock: Fix accept_queue memory leak  As the final stages of socket destruction may be delayed, it is possible that virtio_transport_recv_listen() will be called after the accept_queue has been flushed, but before the SOCK_DONE flag has been set. As a result, sockets enqueued after the flush would remain unremoved, leading to a memory leak.  vsock_release   __vsock_release     lock     virtio_transport_release       virtio_transport_close         schedule_delayed_work(close_work)     sk_shutdown = SHUTDOWN_MASK (!) flush accept_queue     release                                         virtio_transport_recv_pkt                                           vsock_find_bound_socket                                           lock                                           if flag(SOCK_DONE) return                                           virtio_transport_recv_listen                                             child = vsock_create_connected                                       (!)   vsock_enqueue_accept(child)                                           release close_work   lock   virtio_transport_do_close     set_flag(SOCK_DONE)     virtio_transport_remove_sock       vsock_remove_sock         vsock_remove_bound   release  Introduce a sk_shutdown check to disallow vsock_enqueue_accept() during socket destruction.  unreferenced object 0xffff888109e3f800 (size 2040):   comm \"kworker/5:2\", pid 371, jiffies 4294940105   hex dump (first 32 bytes):     00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................     28 00 0b 40 00 00 00 00 00 00 00 00 00 00 00 00  (..@............   backtrace (crc 9e5f4e84):     [\u003cffffffff81418ff1\u003e] kmem_cache_alloc_noprof+0x2c1/0x360     [\u003cffffffff81d27aa0\u003e] sk_prot_alloc+0x30/0x120     [\u003cffffffff81d2b54c\u003e] sk_alloc+0x2c/0x4b0     [\u003cffffffff81fe049a\u003e] __vsock_create.constprop.0+0x2a/0x310     [\u003cffffffff81fe6d6c\u003e] virtio_transport_recv_pkt+0x4dc/0x9a0     [\u003cffffffff81fe745d\u003e] vsock_loopback_work+0xfd/0x140     [\u003cffffffff810fc6ac\u003e] process_one_work+0x20c/0x570     [\u003cffffffff810fce3f\u003e] worker_thread+0x1bf/0x3a0     [\u003cffffffff811070dd\u003e] kthread+0xdd/0x110     [\u003cffffffff81044fdd\u003e] ret_from_fork+0x2d/0x50     [\u003cffffffff8100785a\u003e] ret_from_fork_asm+0x1a/0x30","modified":"2026-09-15T09:03:16.026757444Z","published":"2024-12-02T14:15:12.667Z","upstream":["CVE-2024-53119"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2024-53119"}],"affected":[{"package":{"name":"linux","ecosystem":"Debian:12","purl":"pkg:deb/debian/linux?arch=source&distro=bookworm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.119-1"}]}],"versions":["6.1.106-1","6.1.106-2","6.1.106-3","6.1.112-1","6.1.115-1","6.1.27-1","6.1.37-1","6.1.38-1","6.1.38-2","6.1.38-2~bpo11+1","6.1.38-3","6.1.38-4","6.1.38-4~bpo11+1","6.1.52-1","6.1.55-1","6.1.55-1~bpo11+1","6.1.64-1","6.1.66-1","6.1.67-1","6.1.69-1","6.1.69-1~bpo11+1","6.1.76-1","6.1.76-1~bpo11+1","6.1.82-1","6.1.85-1","6.1.90-1","6.1.90-1~bpo11+1","6.1.94-1","6.1.94-1~bpo11+1","6.1.98-1","6.1.99-1"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2024-53119.json"}},{"package":{"name":"linux","ecosystem":"Debian:13","purl":"pkg:deb/debian/linux?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.11.10-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2024-53119.json"}},{"package":{"name":"linux","ecosystem":"Debian:14","purl":"pkg:deb/debian/linux?arch=source&distro=forky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.11.10-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2024-53119.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}]}