VYPR
Unrated severityNVD Advisory· Published Jan 9, 2024· Updated Nov 7, 2025

Kernel: information disclosure in vhost/vhost.c:vhost_new_msg()

CVE-2024-0340

Description

A vulnerability was found in vhost_new_msg in drivers/vhost/vhost.c in the Linux kernel, which does not properly initialize memory in messages passed between virtual guests and the host operating system in the vhost/vhost.c:vhost_new_msg() function. This issue can allow local privileged users to read some kernel memory contents when reading from the /dev/vhost-net device file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

209

Patches

Vulnerability mechanics

References

7

News mentions

0

No linked articles in our index yet.