The Linux kernel vulnerability in the vsock/virtio subsystem involved improper handling of non-linear socket buffers during payload copying to the vsockmon tap device. Specifically, virtio_transport_build_skb() called virtio_transport_copy_nonlinear_skb(), which manually initialized an iov_iter without setting its count, causing zero-length copying and uninitialized data exposure. The fix replaced this logic with a unified approach using skb_copy_datagram_iter() with iov_iter_kvec(), properly handling both linear and non-linear skbs and checking the copy function's return value.

This vulnerability results in an empty payload being copied to the vsockmon tap interface for non-linear skbs, leaving data uninitialized. According to the CVSS vector, it does not impact confidentiality or integrity but causes a high impact on availability (A:H), indicating potential denial of service or disruption of service in affected systems.

A fix is available that removes the flawed linear versus non-linear skb handling and uses skb_copy_datagram_iter() for all cases, properly initializing the iov_iter and ensuring payload copying. Systems running affected Linux kernel versions should apply the official kernel updates that include this fix. Patch status is confirmed by the description of the resolved vulnerability. No additional mitigation steps are indicated.