Executive Summary

Informations
Name CVE-2025-21666 First vendor Publication 2025-01-31
Vendor Cve Last vendor Modification 2025-02-03

Security-Database Scoring CVSS v3

Cvss vector : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Overall CVSS Score 5.5
Base Score 5.5 Environmental Score 5.5
impact SubScore 3.6 Temporal Score 5.5
Exploitabality Sub Score 1.8
 
Attack Vector Local Attack Complexity Low
Privileges Required Low User Interaction None
Scope Unchanged Confidentiality Impact None
Integrity Impact None Availability Impact High
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector :
Cvss Base Score N/A Attack Range N/A
Cvss Impact Score N/A Attack Complexity N/A
Cvss Expoit Score N/A Authentication N/A
Calculate full CVSS 2.0 Vectors scores

Detail

In the Linux kernel, the following vulnerability has been resolved:

vsock: prevent null-ptr-deref in vsock_*[has_data|has_space]

Recent reports have shown how we sometimes call vsock_*_has_data() when a vsock socket has been de-assigned from a transport (see attached links), but we shouldn't.

Previous commits should have solved the real problems, but we may have more in the future, so to avoid null-ptr-deref, we can return 0 (no space, no data available) but with a warning.

This way the code should continue to run in a nearly consistent state and have a warning that allows us to debug future problems.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21666

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-476 NULL Pointer Dereference

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 8
Os 3689

Sources (Detail)

https://git.kernel.org/stable/c/91751e248256efc111e52e15115840c35d85abaf
https://git.kernel.org/stable/c/9e5fed46ccd2c34c5fa5a9c8825ce4823fdc853e
https://git.kernel.org/stable/c/b52e50dd4fabd12944172bd486a4f4853b7f74dd
https://git.kernel.org/stable/c/bc9c49341f9728c31fe248c5fbba32d2e81a092b
https://git.kernel.org/stable/c/c23d1d4f8efefb72258e9cedce29de10d057f8ca
https://git.kernel.org/stable/c/daeac89cdb03d30028186f5ff7dc26ec8fa843e7
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
Date Informations
2025-03-19 03:18:36
  • Multiple Updates
2025-03-18 03:31:34
  • Multiple Updates
2025-03-14 03:18:36
  • Multiple Updates
2025-03-06 14:15:08
  • Multiple Updates
2025-03-06 03:09:30
  • Multiple Updates
2025-02-22 03:28:44
  • Multiple Updates
2025-02-04 00:20:33
  • Multiple Updates
2025-02-02 17:20:32
  • Multiple Updates
2025-01-31 17:20:28
  • First insertion