CVE-2025-21666

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-21666
In the Linux kernel, the following vulnerability has been resolved: vsock: prevent null-ptr-deref in vsock_*[has_data|has_space] Recent reports have shown how we sometimes call vsock_*_has_data() when a vsock socket has been de-assigned from a transport (see attached links), but we shouldn't. Previous commits should have solved the real problems, but we may have more in the future, so to avoid null-ptr-deref, we can return 0 (no space, no data available) but with a warning. This way the code should continue to run in a nearly consistent state and have a warning that allows us to debug future problems.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/91751e248256efc111e52e15115840c35d85abaf Patch
https://git.kernel.org/stable/c/9e5fed46ccd2c34c5fa5a9c8825ce4823fdc853e Patch
https://git.kernel.org/stable/c/b52e50dd4fabd12944172bd486a4f4853b7f74dd Patch
https://git.kernel.org/stable/c/bc9c49341f9728c31fe248c5fbba32d2e81a092b Patch
https://git.kernel.org/stable/c/c23d1d4f8efefb72258e9cedce29de10d057f8ca Patch
https://git.kernel.org/stable/c/daeac89cdb03d30028186f5ff7dc26ec8fa843e7 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc7:*:*:*:*:*:*
History

03 Feb 2025, 19:59

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/91751e248256efc111e52e15115840c35d85abaf - () https://git.kernel.org/stable/c/91751e248256efc111e52e15115840c35d85abaf - Patch
References () https://git.kernel.org/stable/c/9e5fed46ccd2c34c5fa5a9c8825ce4823fdc853e - () https://git.kernel.org/stable/c/9e5fed46ccd2c34c5fa5a9c8825ce4823fdc853e - Patch
References () https://git.kernel.org/stable/c/b52e50dd4fabd12944172bd486a4f4853b7f74dd - () https://git.kernel.org/stable/c/b52e50dd4fabd12944172bd486a4f4853b7f74dd - Patch
References () https://git.kernel.org/stable/c/bc9c49341f9728c31fe248c5fbba32d2e81a092b - () https://git.kernel.org/stable/c/bc9c49341f9728c31fe248c5fbba32d2e81a092b - Patch
References () https://git.kernel.org/stable/c/c23d1d4f8efefb72258e9cedce29de10d057f8ca - () https://git.kernel.org/stable/c/c23d1d4f8efefb72258e9cedce29de10d057f8ca - Patch
References () https://git.kernel.org/stable/c/daeac89cdb03d30028186f5ff7dc26ec8fa843e7 - () https://git.kernel.org/stable/c/daeac89cdb03d30028186f5ff7dc26ec8fa843e7 - Patch
First Time Linux linux Kernel
Linux
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE CWE-476
CPE cpe:2.3:o:linux:linux_kernel:6.13:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc7:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc3:*:*:*:*:*:*
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: vsock: previene null-ptr-deref en vsock_*[has_data|has_space] Informes recientes han mostrado cómo a veces llamamos a vsock_*_has_data() cuando un socket vsock ha sido desasignado de un transporte (ver enlaces adjuntos), pero no deberíamos. Las confirmaciones anteriores deberían haber resuelto los problemas reales, pero es posible que tengamos más en el futuro, por lo que para evitar null-ptr-deref, podemos devolver 0 (sin espacio, sin datos disponibles) pero con una advertencia. De esta manera, el código debería continuar ejecutándose en un estado casi consistente y tener una advertencia que nos permita depurar problemas futuros.

02 Feb 2025, 11:15

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/daeac89cdb03d30028186f5ff7dc26ec8fa843e7 -

31 Jan 2025, 12:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-01-31 12:15

Updated : 2025-02-03 19:59

NVD link : CVE-2025-21666

Mitre link : CVE-2025-21666

CVE.ORG link : CVE-2025-21666

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference