Database/Kernel, userspace & hypervisor
VMware ESXi / Workstation / Tools: Uninitialised memory in vSockets discloses host memory to the guest
CVSS 7.1CVE-2025-41239Kernel, userspace & hypervisorcurated
Impact
Uninitialised memory in vSockets discloses host memory to the guest
Who can reach it
Tenant VM guest
What to do
ESXi patch + host reboot; also VMware Tools update in guests
References
Related entries
- PackageKit dnf5 backend: an unprivileged local user can uninstall packages under a simulate flagCVE-2026-19816 · PackageKit dnf5 backend (RepoRemove polkit bypass)High
- Linux kernel (drivers/pci/controller/dwc): Raising an MSI-X interrupt is a posted PCI write, and the endpoint driverCVE-2026-23361 · Linux kernel (drivers/pci/controller/dwc)High
- Linux kernel crypto authencesn: out-of-bounds access with a 1-3 byte ahash digest via AF_ALGCVE-2026-46033 · Linux kernel crypto authencesn (ahash digest size validation)High
- Linux kernel (drivers/iommu/intel): Killing a VM that has a device attached through the VT-d nested/PASID path makesCVE-2026-52953 · Linux kernel (drivers/iommu/intel)High
- Linux kernel (virt/kvm): A guest store that splits a page and lands on a datamatch-enabled ioeventfd reaches a BUG_ONCVE-2026-63806 · Linux kernel (virt/kvm)High
- Linux KVM/SVM - AVIC IPI virtualization on Hygon Family 18h: AVIC inter-processor-interrupt virtualization is unsafe onCVE-2026-64172 · Linux KVM/SVM - AVIC IPI virtualization on Hygon Family 18hHigh
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.