A vulnerability in the Linux kernel vsock/virtio implementation could allow a local attacker to potentially achieve code execution or system instability by exploiting race conditions during power state transitions.

This is a race condition vulnerability occurring within the vsock/virtio driver. Worker threads incorrectly read virtqueues before acquiring necessary mutex locks, which can lead to a use-after-free state if a device suspend or resume event occurs simultaneously, allowing the thread to retain a pointer to a deleted queue.

The vulnerability carries a CVSS score of 8.4, indicating high severity. Successful exploitation could lead to full system compromise, including unauthorized data access or complete system denial of service. Because the flaw resides within the core kernel, the potential for privilege escalation is significant, posing a severe risk to the integrity and availability of the affected host.

Immediate Action: Update your Linux kernel to version 5.15.216, 6.1.183, 6.6.152, 6.12.104, or the latest stable release provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel oops or unexpected service restarts specifically related to vsock or virtio interfaces.

Compensating Controls: Restrict access to virtualized hardware interfaces and limit the ability of unprivileged users to trigger device suspend or resume commands where possible.

Public Exploit Available: No

Given the critical nature of kernel-level vulnerabilities, organizations should prioritize patching affected systems. Apply the kernel updates as soon as they are available in your distribution's stable repository to mitigate the risk of local exploitation.