CVE-2025-21669

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-21669
In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: discard packets if the transport changes If the socket has been de-assigned or assigned to another transport, we must discard any packets received because they are not expected and would cause issues when we access vsk->transport. A possible scenario is described by Hyunwoo Kim in the attached link, where after a first connect() interrupted by a signal, and a second connect() failed, we can find `vsk->transport` at NULL, leading to a NULL pointer dereference.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/18a7fc371d1dbf8deff16c2dd9292bcc73f43040 Patch
https://git.kernel.org/stable/c/2cb7c756f605ec02ffe562fb26828e4bcc5fdfc1 Patch
https://git.kernel.org/stable/c/6486915fa661584d70e8e7e4068c6c075c67dd6d Patch
https://git.kernel.org/stable/c/677579b641af109613564460a4e3bdcb16850b61 Patch
https://git.kernel.org/stable/c/88244163bc7e7b0ce9dd7bf4c8a563b41525c3ee Patch
https://git.kernel.org/stable/c/d88b249e14bd0ee1e46bbe4f456e22e01b8c68de Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc7:*:*:*:*:*:*
History

04 Feb 2025, 15:38

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/18a7fc371d1dbf8deff16c2dd9292bcc73f43040 - () https://git.kernel.org/stable/c/18a7fc371d1dbf8deff16c2dd9292bcc73f43040 - Patch
References () https://git.kernel.org/stable/c/2cb7c756f605ec02ffe562fb26828e4bcc5fdfc1 - () https://git.kernel.org/stable/c/2cb7c756f605ec02ffe562fb26828e4bcc5fdfc1 - Patch
References () https://git.kernel.org/stable/c/6486915fa661584d70e8e7e4068c6c075c67dd6d - () https://git.kernel.org/stable/c/6486915fa661584d70e8e7e4068c6c075c67dd6d - Patch
References () https://git.kernel.org/stable/c/677579b641af109613564460a4e3bdcb16850b61 - () https://git.kernel.org/stable/c/677579b641af109613564460a4e3bdcb16850b61 - Patch
References () https://git.kernel.org/stable/c/88244163bc7e7b0ce9dd7bf4c8a563b41525c3ee - () https://git.kernel.org/stable/c/88244163bc7e7b0ce9dd7bf4c8a563b41525c3ee - Patch
References () https://git.kernel.org/stable/c/d88b249e14bd0ee1e46bbe4f456e22e01b8c68de - () https://git.kernel.org/stable/c/d88b249e14bd0ee1e46bbe4f456e22e01b8c68de - Patch
CPE cpe:2.3:o:linux:linux_kernel:6.13:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc7:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc3:*:*:*:*:*:*
First Time Linux linux Kernel
Linux
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
Summary
  • (es) En el kernel Linux, se ha resuelto la siguiente vulnerabilidad: vsock/virtio: descartar paquetes si cambia el transporte Si el socket ha sido desasignado o asignado a otro transporte, debemos descartar cualquier paquete recibido porque no son los esperados y causarían problemas cuando accedamos a vsk->transport. Un posible escenario es descrito por Hyunwoo Kim en el enlace adjunto, donde después de un primer connect() interrumpido por una señal, y un segundo connect() fallido, podemos encontrar `vsk->transport` en NULL, lo que lleva a una desreferencia de puntero NULL.
CWE CWE-476

02 Feb 2025, 11:15

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/18a7fc371d1dbf8deff16c2dd9292bcc73f43040 -

31 Jan 2025, 12:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-01-31 12:15

Updated : 2025-02-04 15:38

NVD link : CVE-2025-21669

Mitre link : CVE-2025-21669

CVE.ORG link : CVE-2025-21669

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference