Use-After-Free Vulnerability in Linux Kernel's vsock Functionality

CVE-2025-38618

What is CVE-2025-38618?

A vulnerability exists in the Linux kernel's vsock functionality that allows binding to the VMADDR_PORT_ANY, which can lead to a use-after-free condition upon connection. When a socket is bound to VMADDR_PORT_ANY, the socket returned by accept() has the same port but is not considered an unbound socket, resulting in improper reference count management. This issue can potentially be exploited if binding is not adequately restricted. Updates are recommended to modify the binding checks in the vsock implementation to prevent this error.

References