cbcvebase.
CVE-2025-21669
published 2025-01-31

CVE-2025-21669: In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: discard packets if the transport changes If the socket has been de-assigned…

PriorityP419medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.23%
13.5th percentile
In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: discard packets if the transport changes If the socket has been de-assigned or assigned to another transport, we must discard any packets received because they are not expected and would cause issues when we access vsk->transport. A possible scenario is described by Hyunwoo Kim in the attached link, where after a first connect() interrupted by a signal, and a second connect() failed, we can find `vsk->transport` at NULL, leading to a NULL pointer dereference.

Affected

26 ranges· showing 25
VendorProductVersion rangeFixed in
debianlinux< linux 6.1.128-1 (bookworm)linux 6.1.128-1 (bookworm)
debianlinux-6.1< linux 6.1.128-1 (bookworm)linux 6.1.128-1 (bookworm)
linuxlinux
linuxlinux>= c0cfa2d8a788fcf45df5bf4070ab2474c88d543a < 18a7fc371d1dbf8deff16c2dd9292bcc73f4304018a7fc371d1dbf8deff16c2dd9292bcc73f43040
linuxlinux>= c0cfa2d8a788fcf45df5bf4070ab2474c88d543a < 6486915fa661584d70e8e7e4068c6c075c67dd6d6486915fa661584d70e8e7e4068c6c075c67dd6d
linuxlinux>= c0cfa2d8a788fcf45df5bf4070ab2474c88d543a < 88244163bc7e7b0ce9dd7bf4c8a563b41525c3ee88244163bc7e7b0ce9dd7bf4c8a563b41525c3ee
linuxlinux>= c0cfa2d8a788fcf45df5bf4070ab2474c88d543a < d88b249e14bd0ee1e46bbe4f456e22e01b8c68ded88b249e14bd0ee1e46bbe4f456e22e01b8c68de
linuxlinux>= c0cfa2d8a788fcf45df5bf4070ab2474c88d543a < 677579b641af109613564460a4e3bdcb16850b61677579b641af109613564460a4e3bdcb16850b61
linuxlinux>= c0cfa2d8a788fcf45df5bf4070ab2474c88d543a < 2cb7c756f605ec02ffe562fb26828e4bcc5fdfc12cb7c756f605ec02ffe562fb26828e4bcc5fdfc1
linuxlinux_kernel
linuxlinux_kernel
linuxlinux_kernel
linuxlinux_kernel
linuxlinux_kernel
linuxlinux_kernel
linuxlinux_kernel
linuxlinux_kernel>= 0 < 5.10.234-15.10.234-1
linuxlinux_kernel>= 0 < 6.1.128-16.1.128-1
linuxlinux_kernel>= 0 < 6.12.11-16.12.11-1
linuxlinux_kernel>= 0 < 6.12.11-16.12.11-1
linuxlinux_kernel>= 0 < 5.15.0-135.1465.15.0-135.146
linuxlinux_kernel>= 0 < 6.8.0-62.656.8.0-62.65
linuxlinux_kernel>= 5.16 < 6.1.1276.1.127
linuxlinux_kernel>= 5.5 < 5.15.1775.15.177
linuxlinux_kernel>= 6.2 < 6.6.746.6.74

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv7.8HIGH
vendor_ubuntu7.8HIGH
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.