CVE-2025-21666
Linux Kernel vsock Null Pointer Dereference Vulnerability
Description
In the Linux kernel, the following vulnerability has been resolved: vsock: prevent null-ptr-deref in vsock_*[has_data|has_space] Recent reports have shown how we sometimes call vsock_*_has_data() when a vsock socket has been de-assigned from a transport (see attached links), but we shouldn't. Previous commits should have solved the real problems, but we may have more in the future, so to avoid null-ptr-deref, we can return 0 (no space, no data available) but with a warning. This way the code should continue to run in a nearly consistent state and have a warning that allows us to debug future problems.
INFO
Published Date :
Jan. 31, 2025, 12:15 p.m.
Last Modified :
Feb. 3, 2025, 7:59 p.m.
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Remotely Exploitable :
No
Impact Score :
3.6
Exploitability Score :
1.8
Public PoC/Exploit Available at Github
CVE-2025-21666 has a 1 public PoC/Exploit available at Github.
Go to the Public Exploits tab to see the list.
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2025-21666.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
DSA and DLA for Debian last 14 days
Python
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2025-21666 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2025-21666 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
Initial Analysis by [email protected]
Feb. 03, 2025
Action Type Old Value New Value Added CVSS V3.1 NIST AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Added CWE NIST CWE-476 Added CPE Configuration OR *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.5 up to (excluding) 5.15.177 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.16 up to (excluding) 6.1.127 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.2 up to (excluding) 6.6.74 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.7 up to (excluding) 6.12.11 *cpe:2.3:o:linux:linux_kernel:6.13:rc1:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:6.13:rc2:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:6.13:rc3:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:6.13:rc4:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:6.13:rc5:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:6.13:rc6:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:6.13:rc7:*:*:*:*:*:* Changed Reference Type https://git.kernel.org/stable/c/91751e248256efc111e52e15115840c35d85abaf No Types Assigned https://git.kernel.org/stable/c/91751e248256efc111e52e15115840c35d85abaf Patch Changed Reference Type https://git.kernel.org/stable/c/9e5fed46ccd2c34c5fa5a9c8825ce4823fdc853e No Types Assigned https://git.kernel.org/stable/c/9e5fed46ccd2c34c5fa5a9c8825ce4823fdc853e Patch Changed Reference Type https://git.kernel.org/stable/c/b52e50dd4fabd12944172bd486a4f4853b7f74dd No Types Assigned https://git.kernel.org/stable/c/b52e50dd4fabd12944172bd486a4f4853b7f74dd Patch Changed Reference Type https://git.kernel.org/stable/c/bc9c49341f9728c31fe248c5fbba32d2e81a092b No Types Assigned https://git.kernel.org/stable/c/bc9c49341f9728c31fe248c5fbba32d2e81a092b Patch Changed Reference Type https://git.kernel.org/stable/c/c23d1d4f8efefb72258e9cedce29de10d057f8ca No Types Assigned https://git.kernel.org/stable/c/c23d1d4f8efefb72258e9cedce29de10d057f8ca Patch Changed Reference Type https://git.kernel.org/stable/c/daeac89cdb03d30028186f5ff7dc26ec8fa843e7 No Types Assigned https://git.kernel.org/stable/c/daeac89cdb03d30028186f5ff7dc26ec8fa843e7 Patch -
CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Feb. 02, 2025
Action Type Old Value New Value Added Reference https://git.kernel.org/stable/c/daeac89cdb03d30028186f5ff7dc26ec8fa843e7 -
New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Jan. 31, 2025
Action Type Old Value New Value Added Description In the Linux kernel, the following vulnerability has been resolved: vsock: prevent null-ptr-deref in vsock_*[has_data|has_space] Recent reports have shown how we sometimes call vsock_*_has_data() when a vsock socket has been de-assigned from a transport (see attached links), but we shouldn't. Previous commits should have solved the real problems, but we may have more in the future, so to avoid null-ptr-deref, we can return 0 (no space, no data available) but with a warning. This way the code should continue to run in a nearly consistent state and have a warning that allows us to debug future problems. Added Reference https://git.kernel.org/stable/c/91751e248256efc111e52e15115840c35d85abaf Added Reference https://git.kernel.org/stable/c/9e5fed46ccd2c34c5fa5a9c8825ce4823fdc853e Added Reference https://git.kernel.org/stable/c/b52e50dd4fabd12944172bd486a4f4853b7f74dd Added Reference https://git.kernel.org/stable/c/bc9c49341f9728c31fe248c5fbba32d2e81a092b Added Reference https://git.kernel.org/stable/c/c23d1d4f8efefb72258e9cedce29de10d057f8ca
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2025-21666 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2025-21666
weaknesses.