The Linux kernel’s virtio transport layer contained a logic error where the iov_iter struct used to copy non‑linear socket buffers was zero‑initialized without setting its count field. As a result, the copy operation treated the payload length as zero and transmitted uninitialized data to the vsockmon tap device. This flaw is associated with CWE‑401. While the vulnerability does not grant code execution, it could expose arbitrary kernel memory or corrupt data sent to the monitor interface.

Any Linux kernel that implements the vsock/virtio driver and exposes a vsockmon tap interface before the commit that unifies the copy logic remains vulnerable. Distribution‑specific kernel packages that have not yet incorporated the fix continue to be affected.

The CVSS score of 5.5 indicates moderate severity, and the EPSS score of <1% implies a low likelihood of exploitation. The flaw is not listed in CISA KEV. It is inferred that an attacker could exploit the issue by sending crafted packets through a vSock channel to a device exposing the tap interface; beyond that, the bug simply results in uninitialized payload data being transmitted, so it does not provide remote code execution but can lead to data leakage or integrity problems.