Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2025-21669

vsock/virtio: discard packets if the transport changes

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: discard packets if the transport changes If the socket has been de-assigned or assigned to another transport, we must discard any packets received because they are not expected and would cause issues when we access vsk->transport. A possible scenario is described by Hyunwoo Kim in the attached link, where after a first connect() interrupted by a signal, and a second connect() failed, we can find `vsk->transport` at NULL, leading to a NULL pointer dereference.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • c0cfa2d8a788fcf45df5bf4070ab2474c88d543a to < 18a7fc371d1dbf8deff16c2dd9292bcc73f43040affected
  • c0cfa2d8a788fcf45df5bf4070ab2474c88d543a to < 6486915fa661584d70e8e7e4068c6c075c67dd6daffected
  • c0cfa2d8a788fcf45df5bf4070ab2474c88d543a to < 88244163bc7e7b0ce9dd7bf4c8a563b41525c3eeaffected
  • c0cfa2d8a788fcf45df5bf4070ab2474c88d543a to < d88b249e14bd0ee1e46bbe4f456e22e01b8c68deaffected
  • c0cfa2d8a788fcf45df5bf4070ab2474c88d543a to < 677579b641af109613564460a4e3bdcb16850b61affected
  • c0cfa2d8a788fcf45df5bf4070ab2474c88d543a to < 2cb7c756f605ec02ffe562fb26828e4bcc5fdfc1affected

Linux Linux

Default version status: affected

  • 5.5affected
  • 0 to < 5.5unaffected
  • 5.10.234 to ≤ 5.10.*unaffected
  • 5.15.177 to ≤ 5.15.*unaffected
  • 6.1.127 to ≤ 6.1.*unaffected
  • 6.6.74 to ≤ 6.6.*unaffected
  • 6.12.11 to ≤ 6.12.*unaffected
  • 6.13 to ≤ *unaffected

References