CVE-2020-10942: In the Linux kernel before 5.5.8, get_raw_socket in drivers/vhost/net.c lacks validation of an sk_family fi...

Security readout for executives and security teams

CVE-2020-10942 is a Linux kernel flaw in vhost-net handling before kernel 5.5.8. The issue can cause kernel stack corruption through crafted system calls. That matters because kernel memory corruption can affect system stability and potentially security boundaries, but the provided sources do not show active exploitation or a CVSS score. Exposure is most credible on systems running Linux kernel versions before 5.5.8 or vendor kernel packages identified by distro advisories. The sources point to vhost-net, so virtualization or network-heavy Linux hosts deserve attention. The bundle does not provide precise product CPEs or full prerequisite details. Address this as a kernel maintenance priority, especially for virtualization infrastructure. There is no provided evidence of active exploitation, but kernel stack corruption can create serious reliability and security risk. Patch through normal emergency-change processes where affected hosts support critical workloads. Mitigation focus: Update affected Linux kernels through the relevant vendor security channel.; Confirm the upstream fix or equivalent backport is included.; Review Debian, Ubuntu, openSUSE, NetApp, and platform-specific advisories..

Prepared

Jun 5, 2026, 15:17 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.