Linux Kernel vsock/Virtio Transport Change Handling Vulnerability Leading to NULL Pointer Dereference

A vulnerability in the Linux kernel's vsock/virtio implementation can lead to a NULL pointer dereference. This issue occurs when a socket is reassigned to a different transport or de-assigned, causing any received packets to be discarded. The problem arises because the vsk->transport field can become NULL, particularly after a connect() call is interrupted by a signal, followed by a failed second connect() attempt. Accessing a NULL transport can result in a NULL pointer dereference, causing a crash or unintended behavior.

Impact

Exploitation of this vulnerability leads to a NULL pointer dereference, causing a crash or potential denial of service.