CVE-2024-44996

A vulnerability was found in the Linux kernel related to vsock, involving recursive calls due to BPF sockmap integration. When a vsock socket was added to a BPF sockmap, the prot->recvmsg function was replaced with vsock_bpf_recvmsg(). This could lead to recursion as vsock_bpf_recvmsg() called __vsock_recvmsg(), which then invokes vsock_connectible_recvmsg(), leading back to vsock_bpf_recvmsg().

This issue is classified as moderate severity rather than important because the recursive vulnerability in vsock primarily affects the handling of sockets within a specific context involving BPF sockmap integration. While it could lead to stack overflow and potential denial of service under certain conditions, it does not inherently allow for privilege escalation or arbitrary code execution. The recursion is constrained to the vsock_bpf_recvmsg() and __vsock_recvmsg() functions, and effective mitigation can be achieved by bypassing BPF logic when recursion is detected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.