In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: discard packets if the transport changes If the socket has been de-assigned or assigned to another transport, we must discard any packets received because they are not expected and would cause issues when we access vsk->transport. A possible scenario is described by Hyunwoo Kim in the attached link, where after a first connect() interrupted by a signal, and a second connect() failed, we can find `vsk->transport` at NULL, leading to a NULL pointer dereference.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel
Redhat
  • Enterprise Linux

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc7:*:*:*:*:*:*
Package CPE Advisory Released Date
Red Hat Enterprise Linux 10
kernel-0:6.12.0-55.16.1.el10_0 cpe:/o:redhat:enterprise_linux:10.0 RHSA-2025:8669 2025-06-09T00:00:00Z
Red Hat Enterprise Linux 9
kernel-0:5.14.0-570.12.1.el9_6 cpe:/a:redhat:enterprise_linux:9 RHSA-2025:6966 2025-05-13T00:00:00Z
kernel-0:5.14.0-570.12.1.el9_6 cpe:/o:redhat:enterprise_linux:9 RHSA-2025:6966 2025-05-13T00:00:00Z
References
Link Providers
https://git.kernel.org/stable/c/18a7fc371d1dbf8deff16c2dd9292bcc73f43040 cve-icon cve-icon
https://git.kernel.org/stable/c/2cb7c756f605ec02ffe562fb26828e4bcc5fdfc1 cve-icon cve-icon
https://git.kernel.org/stable/c/6486915fa661584d70e8e7e4068c6c075c67dd6d cve-icon cve-icon
https://git.kernel.org/stable/c/677579b641af109613564460a4e3bdcb16850b61 cve-icon cve-icon
https://git.kernel.org/stable/c/88244163bc7e7b0ce9dd7bf4c8a563b41525c3ee cve-icon cve-icon
https://git.kernel.org/stable/c/d88b249e14bd0ee1e46bbe4f456e22e01b8c68de cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025013158-CVE-2025-21669-b52c@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-21669 cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-21669 cve-icon
History

Wed, 01 Oct 2025 20:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 16 Jul 2025 13:45:00 +0000

Type Values Removed Values Added
Metrics epss

{'score': 0.00039}

 epss

{'score': 0.00043}

Fri, 11 Jul 2025 13:45:00 +0000

Type Values Removed Values Added
Metrics epss

{'score': 0.00027}

 epss

{'score': 0.00039}

Tue, 10 Jun 2025 07:00:00 +0000

Type Values Removed Values Added
CPEs cpe:/o:redhat:enterprise_linux:10.0

Wed, 14 May 2025 03:00:00 +0000

Type Values Removed Values Added
First Time appeared Redhat
Redhat enterprise Linux
CPEs cpe:/a:redhat:enterprise_linux:9
cpe:/o:redhat:enterprise_linux:9
Vendors & Products Redhat
Redhat enterprise Linux

Tue, 04 Feb 2025 16:00:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Weaknesses CWE-476
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.13:rc7:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel

Sun, 02 Feb 2025 10:30:00 +0000

Type Values Removed Values Added
References

Sat, 01 Feb 2025 02:00:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Fri, 31 Jan 2025 11:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: discard packets if the transport changes If the socket has been de-assigned or assigned to another transport, we must discard any packets received because they are not expected and would cause issues when we access vsk->transport. A possible scenario is described by Hyunwoo Kim in the attached link, where after a first connect() interrupted by a signal, and a second connect() failed, we can find `vsk->transport` at NULL, leading to a NULL pointer dereference.
Title vsock/virtio: discard packets if the transport changes
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-01-31T11:25:33.185Z

Updated: 2025-10-01T19:57:12.459Z

Reserved: 2024-12-29T08:45:45.735Z

Link: CVE-2025-21669

cve-icon Vulnrichment

Updated: 2025-10-01T15:58:30.361Z

cve-icon NVD

Status : Modified

Published: 2025-01-31T12:15:28.053

Modified: 2025-10-01T20:18:18.093

Link: CVE-2025-21669

cve-icon Redhat

Severity : Moderate

Publid Date: 2025-01-31T00:00:00Z

Links: CVE-2025-21669 - Bugzilla