Log in Start free

Vulnerability · Published Jan 31, 2025 · Assigned by Linux

CVE-2025-21669vsock/virtio: discard packets if the transport changes

High 7.8

In plain English

A high-severity null pointer dereference in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 14% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.2%top 85.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: discard packets if the transport changes If the socket has been de-assigned or assigned to another transport, we must discard any packets received because they are not expected and would cause issues when we access vsk->transport. A possible scenario is described by Hyunwoo Kim in the attached link, where after a first connect() interrupted by a signal, and a second connect() failed, we can find `vsk->transport` at NULL, leading to a NULL pointer dereference.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.1.128-1DEBIAN-CVE-2025-21669
Debian:13linux6.12.11-1DEBIAN-CVE-2025-21669
Debian:14linux6.12.11-1DEBIAN-CVE-2025-21669
Rocky Linux:10kernel0:6.12.0-55.16.1.el10_0RLSA-2025:8669
Ubuntu:22.04:LTSlinux5.15.0-135.146UBUNTU-CVE-2025-21669
Ubuntu:24.04:LTSlinux6.8.0-62.65USN-7595-1
Ubuntu:24.04:LTSlinux6.8.0-62.65UBUNTU-CVE-2025-21669
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2025-21669
Ubuntu:22.04:LTSlinux-aws5.15.0-1080.87UBUNTU-CVE-2025-21669
Ubuntu:24.04:LTSlinux-aws6.8.0-1030.32USN-7595-1
Ubuntu:24.04:LTSlinux-aws6.8.0-1030.32UBUNTU-CVE-2025-21669
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2025-21669
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2025-21669
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2025-21669
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1030.32~22.04.1UBUNTU-CVE-2025-21669
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1030.32~22.04.1USN-7595-1
Ubuntu:22.04:LTSlinux-azure5.15.0-1084.93UBUNTU-CVE-2025-21669
Ubuntu:24.04:LTSlinux-azure6.8.0-1030.35USN-7596-1
Ubuntu:24.04:LTSlinux-azure6.8.0-1030.35UBUNTU-CVE-2025-21669
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2025-21669
Ubuntu:24.04:LTSlinux-azure-6.116.11.0-1013.13~24.04.1USN-7448-1
Ubuntu:24.04:LTSlinux-azure-6.116.11.0-1013.13~24.04.1UBUNTU-CVE-2025-21669
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2025-21669
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2025-21669
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1030.35~22.04.1UBUNTU-CVE-2025-21669
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1030.35~22.04.1USN-7596-1
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1084.93.1UBUNTU-CVE-2025-21669
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2025-21669
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2025-21669
Ubuntu:24.04:LTSlinux-azure-nvidia6.8.0-1018.19UBUNTU-CVE-2025-21669
Ubuntu:24.04:LTSlinux-azure-nvidia6.8.0-1018.19USN-7596-2
Ubuntu:22.04:LTSlinux-gcp5.15.0-1079.88UBUNTU-CVE-2025-21669
Ubuntu:24.04:LTSlinux-gcp6.8.0-1031.33UBUNTU-CVE-2025-21669
Ubuntu:24.04:LTSlinux-gcp6.8.0-1031.33USN-7595-5
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2025-21669
Ubuntu:24.04:LTSlinux-gcp-6.116.11.0-1013.13~24.04.1UBUNTU-CVE-2025-21669
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2025-21669
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2025-21669
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1031.33~22.04.1USN-7595-5
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1031.33~22.04.1UBUNTU-CVE-2025-21669
Ubuntu:22.04:LTSlinux-gke5.15.0-1077.83UBUNTU-CVE-2025-21669
Ubuntu:24.04:LTSlinux-gke6.8.0-1026.30UBUNTU-CVE-2025-21669
Ubuntu:24.04:LTSlinux-gke6.8.0-1026.30USN-7595-1
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1062.70UBUNTU-CVE-2025-21669
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1013.15UBUNTU-CVE-2025-21669
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1013.15USN-7595-1
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2025-21669
Ubuntu:24.04:LTSlinux-hwe-6.116.11.0-24.24~24.04.1USN-7445-1
Ubuntu:24.04:LTSlinux-hwe-6.116.11.0-24.24~24.04.1UBUNTU-CVE-2025-21669
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2025-21669
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2025-21669
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-64.67~22.04.1UBUNTU-CVE-2025-21669
Ubuntu:22.04:LTSlinux-ibm5.15.0-1072.75UBUNTU-CVE-2025-21669
Ubuntu:24.04:LTSlinux-ibm6.8.0-1027.27USN-7595-1
Ubuntu:24.04:LTSlinux-ibm6.8.0-1027.27UBUNTU-CVE-2025-21669
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1027.27~22.04.1UBUNTU-CVE-2025-21669
Ubuntu:22.04:LTSlinux-intel-iot-realtime5.15.0-1073.75UBUNTU-CVE-2025-21669
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1075.81UBUNTU-CVE-2025-21669
Ubuntu:22.04:LTSlinux-kvm5.15.0-1076.81UBUNTU-CVE-2025-21669
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-135.146UBUNTU-CVE-2025-21669
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-62.65.1USN-7595-1
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-62.65.1UBUNTU-CVE-2025-21669
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2025-21669
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.116.11.0-1012.13~24.04.1USN-7445-1
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.116.11.0-1012.13~24.04.1UBUNTU-CVE-2025-21669
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2025-21669
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2025-21669
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-62.65.1~22.04.1USN-7595-1
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-62.65.1~22.04.1UBUNTU-CVE-2025-21669
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1074.75UBUNTU-CVE-2025-21669
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1029.32UBUNTU-CVE-2025-21669
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1029.32USN-7595-1
Ubuntu:24.04:LTSlinux-nvidia-6.116.11.0-1007.7UBUNTU-CVE-2025-21669
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2025-21669
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2025-21669
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1029.32~22.04.1USN-7595-1
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1029.32~22.04.1UBUNTU-CVE-2025-21669
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1029.32.1USN-7595-1
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1029.32.1UBUNTU-CVE-2025-21669
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1033.33UBUNTU-CVE-2025-21669
Ubuntu:24.04:LTSlinux-nvidia-tegra6.8.0-1008.8UBUNTU-CVE-2025-21669
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1021.21UBUNTU-CVE-2025-21669
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2025-21669
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2025-21669
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2025-21669
Ubuntu:24.04:LTSlinux-oem-6.116.11.0-1020.20USN-7445-1
Ubuntu:24.04:LTSlinux-oem-6.116.11.0-1020.20UBUNTU-CVE-2025-21669
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2025-21669
Ubuntu:24.04:LTSlinux-oem-6.86.8.0-1029.29UBUNTU-CVE-2025-21669
Ubuntu:24.04:LTSlinux-oem-6.86.8.0-1029.29USN-7595-1
Ubuntu:22.04:LTSlinux-oracle5.15.0-1077.83UBUNTU-CVE-2025-21669
Ubuntu:24.04:LTSlinux-oracle6.8.0-1027.28UBUNTU-CVE-2025-21669
Ubuntu:24.04:LTSlinux-oracle6.8.0-1027.28USN-7595-4
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2025-21669
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1027.28~22.04.1UBUNTU-CVE-2025-21669
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1027.28~22.04.1USN-7595-4
Ubuntu:22.04:LTSlinux-raspi5.15.0-1074.77UBUNTU-CVE-2025-21669
Ubuntu:24.04:LTSlinux-raspi6.8.0-1029.33UBUNTU-CVE-2025-21669
Ubuntu:24.04:LTSlinux-raspi6.8.0-1029.33USN-7595-4
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2025-21669
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-21669
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-21669
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-21669
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-21669
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2025-21669
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2025-21669
Ubuntu:22.04:LTSlinux-riscv-6.86.8.0-62.65~22.04.1UBUNTU-CVE-2025-21669
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2025-21669
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2025-21669
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2025-21669
Ubuntu:24.04:LTSlinux-xilinx6.8.0-1017.18UBUNTU-CVE-2025-21669
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1044.48UBUNTU-CVE-2025-21669

Affected products (as reported)

VendorProductVersions
Linux Linux c0cfa2d8a788fcf45df5bf4070ab2474c88d543a – before 18a7fc371d1dbf8deff16c2dd9292bcc73f43040c0cfa2d8a788fcf45df5bf4070ab2474c88d543a – before 6486915fa661584d70e8e7e4068c6c075c67dd6dc0cfa2d8a788fcf45df5bf4070ab2474c88d543a – before 88244163bc7e7b0ce9dd7bf4c8a563b41525c3eec0cfa2d8a788fcf45df5bf4070ab2474c88d543a – before d88b249e14bd0ee1e46bbe4f456e22e01b8c68dec0cfa2d8a788fcf45df5bf4070ab2474c88d543a – before 677579b641af109613564460a4e3bdcb16850b61c0cfa2d8a788fcf45df5bf4070ab2474c88d543a – before 2cb7c756f605ec02ffe562fb26828e4bcc5fdfc1
Linux Linux 5.5

Weakness: CWE-476 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References