Database/Kernel, userspace & hypervisor
Linux kernel (vsock): vsock binding not kept until socket destruction - use-after-free, local root with a public exploit
CVE-2025-21756Kernel, userspace & hypervisorcurated
Impact
vsock binding not kept until socket destruction - use-after-free, local root with a public exploit
Who can reach it
Any tenant process in a container; tenant VM guest
What to do
Livepatchable; otherwise drain + reboot. Blacklist vsock where unused
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.