CVE-2024-53103

A flaw was found in the Linux kernel's Hyper-V socket (hv_sock) driver. When a socket connection is released, the transport pointer is not properly cleared, creating a dangling pointer that references already released memory. A local attacker could exploit this issue to trigger memory corruption, leading to a system crash and Denial of Service (DoS).

This issue is considered to be a moderate impact flaw, as the exploitation in this will not cause an Intigrity (I:L) threat with the available usecase.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Prevent the hv_sock module from loading if Hyper-V socket transport is not required:

1. Blacklist the module configuration:

echo "install hv_sock /bin/true" >> /etc/modprobe.d/disable-hv_sock.conf

2. Unload the module from the running system:

rmmod hv_sock

Warning: A system reboot is required if the module is actively in use and cannot be unloaded dynamically.

Caveat: Disabling this module prevents guest-to-host and host-to-guest communication over AF_VSOCK sockets in Microsoft Hyper-V environments.