CVE-2024-0340Medium· 4.4▾ SunlitA vulnerability was found in vhost_new_msg in drivers/vhost/vhost.c in the Linux kernel, which does not properly initialize memory in messages passed between virtual guests and the host operating system in the vhost/vhost.c:vhost_new_msg…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 24.2 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.2%
A vulnerability was found in vhost_new_msg in drivers/vhost/vhost.c in the Linux kernel, which does not properly initialize memory in messages passed between virtual guests and the host operating system in the vhost/vhost.c:vhost_new_msg() function. This issue can allow local privileged users to read some kernel memory contents when reading from the /dev/vhost-net device file.
kernel < 6.4-rc6kernel-rt (all versions)kernel (all versions)kernel (all versions)kernel (all versions)kernel (all versions)kernel (all versions)kernel (all versions)kernel-rt (all versions)Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2023-3397High· 7.0Kernel: slab-use-after-free write in txend due to race condition
CVE-2023-6270High· 7.0Kernel: aoe: improper reference count leads to use-after-free vulnerability
CVE-2026-117688Medium· 5.3Keycloak-services: keycloak-services: vault secret disclosure via client registration installation configuration
CVE-2026-116190Low· 3.7github.com/rclone/rclone: rclone: Information disclosure via cross-host HTTP redirects (CVE-2026-116190)
CVE-2026-115449Low· 3.5Libslirp: libslirp: icmp echo reply length desynchronization leaks host ip to guest
CVE-2024-24855Medium· 5.0Race condition vulnerability in Linux kernel scsi device driver lpfc_unregister_fcf_rescan()