Log in Start free

Vulnerability · Published Jan 31, 2025 · Assigned by Linux

CVE-2025-21666vsock: prevent null-ptr-deref in vsock_*[has_data|has_space]

Medium 5.5

In plain English

A medium-severity null pointer dereference in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 13% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)5.5Medium
Exploit odds (30 days)0.2%top 86.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: vsock: prevent null-ptr-deref in vsock_*[has_data|has_space] Recent reports have shown how we sometimes call vsock_*_has_data() when a vsock socket has been de-assigned from a transport (see attached links), but we shouldn't. Previous commits should have solved the real problems, but we may have more in the future, so to avoid null-ptr-deref, we can return 0 (no space, no data available) but with a warning. This way the code should continue to run in a nearly consistent state and have a warning that allows us to debug future problems.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.1.128-1DEBIAN-CVE-2025-21666
Debian:13linux6.12.11-1DEBIAN-CVE-2025-21666
Debian:14linux6.12.11-1DEBIAN-CVE-2025-21666
Ubuntu:22.04:LTSlinux5.15.0-135.146UBUNTU-CVE-2025-21666
Ubuntu:24.04:LTSlinux6.8.0-62.65USN-7595-1
Ubuntu:24.04:LTSlinux6.8.0-62.65UBUNTU-CVE-2025-21666
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2025-21666
Ubuntu:22.04:LTSlinux-aws5.15.0-1080.87UBUNTU-CVE-2025-21666
Ubuntu:24.04:LTSlinux-aws6.8.0-1030.32USN-7595-1
Ubuntu:24.04:LTSlinux-aws6.8.0-1030.32UBUNTU-CVE-2025-21666
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2025-21666
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2025-21666
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2025-21666
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1030.32~22.04.1UBUNTU-CVE-2025-21666
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1030.32~22.04.1USN-7595-1
Ubuntu:22.04:LTSlinux-azure5.15.0-1084.93UBUNTU-CVE-2025-21666
Ubuntu:24.04:LTSlinux-azure6.8.0-1030.35UBUNTU-CVE-2025-21666
Ubuntu:24.04:LTSlinux-azure6.8.0-1030.35USN-7596-1
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2025-21666
Ubuntu:24.04:LTSlinux-azure-6.116.11.0-1013.13~24.04.1USN-7448-1
Ubuntu:24.04:LTSlinux-azure-6.116.11.0-1013.13~24.04.1UBUNTU-CVE-2025-21666
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2025-21666
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2025-21666
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1030.35~22.04.1USN-7596-1
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1030.35~22.04.1UBUNTU-CVE-2025-21666
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1084.93.1UBUNTU-CVE-2025-21666
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2025-21666
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2025-21666
Ubuntu:24.04:LTSlinux-azure-nvidia6.8.0-1018.19USN-7596-2
Ubuntu:24.04:LTSlinux-azure-nvidia6.8.0-1018.19UBUNTU-CVE-2025-21666
Ubuntu:22.04:LTSlinux-gcp5.15.0-1079.88UBUNTU-CVE-2025-21666
Ubuntu:24.04:LTSlinux-gcp6.8.0-1031.33UBUNTU-CVE-2025-21666
Ubuntu:24.04:LTSlinux-gcp6.8.0-1031.33USN-7595-5
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2025-21666
Ubuntu:24.04:LTSlinux-gcp-6.116.11.0-1013.13~24.04.1UBUNTU-CVE-2025-21666
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2025-21666
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2025-21666
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1031.33~22.04.1USN-7595-5
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1031.33~22.04.1UBUNTU-CVE-2025-21666
Ubuntu:22.04:LTSlinux-gke5.15.0-1077.83UBUNTU-CVE-2025-21666
Ubuntu:24.04:LTSlinux-gke6.8.0-1026.30UBUNTU-CVE-2025-21666
Ubuntu:24.04:LTSlinux-gke6.8.0-1026.30USN-7595-1
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1062.70UBUNTU-CVE-2025-21666
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1013.15UBUNTU-CVE-2025-21666
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1013.15USN-7595-1
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2025-21666
Ubuntu:24.04:LTSlinux-hwe-6.116.11.0-24.24~24.04.1UBUNTU-CVE-2025-21666
Ubuntu:24.04:LTSlinux-hwe-6.116.11.0-24.24~24.04.1USN-7445-1
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2025-21666
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2025-21666
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-64.67~22.04.1UBUNTU-CVE-2025-21666
Ubuntu:22.04:LTSlinux-ibm5.15.0-1072.75UBUNTU-CVE-2025-21666
Ubuntu:24.04:LTSlinux-ibm6.8.0-1027.27USN-7595-1
Ubuntu:24.04:LTSlinux-ibm6.8.0-1027.27UBUNTU-CVE-2025-21666
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1027.27~22.04.1UBUNTU-CVE-2025-21666
Ubuntu:22.04:LTSlinux-intel-iot-realtime5.15.0-1073.75UBUNTU-CVE-2025-21666
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1075.81UBUNTU-CVE-2025-21666
Ubuntu:22.04:LTSlinux-kvm5.15.0-1076.81UBUNTU-CVE-2025-21666
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-135.146UBUNTU-CVE-2025-21666
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-62.65.1USN-7595-1
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-62.65.1UBUNTU-CVE-2025-21666
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2025-21666
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.116.11.0-1012.13~24.04.1USN-7445-1
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.116.11.0-1012.13~24.04.1UBUNTU-CVE-2025-21666
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2025-21666
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2025-21666
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-62.65.1~22.04.1USN-7595-1
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-62.65.1~22.04.1UBUNTU-CVE-2025-21666
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1074.75UBUNTU-CVE-2025-21666
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1029.32UBUNTU-CVE-2025-21666
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1029.32USN-7595-1
Ubuntu:24.04:LTSlinux-nvidia-6.116.11.0-1007.7UBUNTU-CVE-2025-21666
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2025-21666
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2025-21666
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1029.32~22.04.1USN-7595-1
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1029.32~22.04.1UBUNTU-CVE-2025-21666
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1029.32.1USN-7595-1
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1029.32.1UBUNTU-CVE-2025-21666
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1033.33UBUNTU-CVE-2025-21666
Ubuntu:24.04:LTSlinux-nvidia-tegra6.8.0-1008.8UBUNTU-CVE-2025-21666
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1021.21UBUNTU-CVE-2025-21666
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2025-21666
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2025-21666
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2025-21666
Ubuntu:24.04:LTSlinux-oem-6.116.11.0-1020.20USN-7445-1
Ubuntu:24.04:LTSlinux-oem-6.116.11.0-1020.20UBUNTU-CVE-2025-21666
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2025-21666
Ubuntu:24.04:LTSlinux-oem-6.86.8.0-1029.29UBUNTU-CVE-2025-21666
Ubuntu:24.04:LTSlinux-oem-6.86.8.0-1029.29USN-7595-1
Ubuntu:22.04:LTSlinux-oracle5.15.0-1077.83UBUNTU-CVE-2025-21666
Ubuntu:24.04:LTSlinux-oracle6.8.0-1027.28UBUNTU-CVE-2025-21666
Ubuntu:24.04:LTSlinux-oracle6.8.0-1027.28USN-7595-4
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2025-21666
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1027.28~22.04.1UBUNTU-CVE-2025-21666
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1027.28~22.04.1USN-7595-4
Ubuntu:22.04:LTSlinux-raspi5.15.0-1074.77UBUNTU-CVE-2025-21666
Ubuntu:24.04:LTSlinux-raspi6.8.0-1029.33UBUNTU-CVE-2025-21666
Ubuntu:24.04:LTSlinux-raspi6.8.0-1029.33USN-7595-4
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2025-21666
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-21666
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-21666
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-21666
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-21666
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2025-21666
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2025-21666
Ubuntu:22.04:LTSlinux-riscv-6.86.8.0-62.65~22.04.1UBUNTU-CVE-2025-21666
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2025-21666
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2025-21666
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2025-21666
Ubuntu:24.04:LTSlinux-xilinx6.8.0-1017.18UBUNTU-CVE-2025-21666
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1044.48UBUNTU-CVE-2025-21666

Affected products (as reported)

VendorProductVersions
Linux Linux c0cfa2d8a788fcf45df5bf4070ab2474c88d543a – before daeac89cdb03d30028186f5ff7dc26ec8fa843e7c0cfa2d8a788fcf45df5bf4070ab2474c88d543a – before 9e5fed46ccd2c34c5fa5a9c8825ce4823fdc853ec0cfa2d8a788fcf45df5bf4070ab2474c88d543a – before b52e50dd4fabd12944172bd486a4f4853b7f74ddc0cfa2d8a788fcf45df5bf4070ab2474c88d543a – before bc9c49341f9728c31fe248c5fbba32d2e81a092bc0cfa2d8a788fcf45df5bf4070ab2474c88d543a – before c23d1d4f8efefb72258e9cedce29de10d057f8cac0cfa2d8a788fcf45df5bf4070ab2474c88d543a – before 91751e248256efc111e52e15115840c35d85abaf
Linux Linux 5.5

Weakness: CWE-476 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References