CVE-2018-14625

CVE-2018-14625 is a race condition vulnerability in the Linux Kernel, specifically affecting the AF_VSOCK protocol, which impacts various distributions including Canonical and Debian Linux. An attacker within a VM guest could exploit this flaw during a race condition between connect() and close() functions to achieve an uncontrolled kernel-memory read, potentially leading to a 4-byte information leak or the interception/corruption of AF_VSOCK messages. Rated with a CVSS score of 7.0 (High), this vulnerability has a local attack vector and high impact on confidentiality, integrity, and availability, though it requires high attack complexity. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.