CVE-2025-21666: vsock: prevent null-ptr-deref in vsock_*[has_data|has_space]

Q: What is the severity of CVE-2025-21666?

CVE-2025-21666 is classified as a moderate severity vulnerability.

Q: How do I fix CVE-2025-21666?

To fix CVE-2025-21666, you should update your Linux kernel to the latest stable version that resolves this issue.

Q: Which versions of the Linux kernel are affected by CVE-2025-21666?

CVE-2025-21666 affects Linux kernel versions from 5.5 up to 6.13-rc7.

Q: What kind of issue does CVE-2025-21666 address?

CVE-2025-21666 addresses a null pointer dereference in the vsock_*[has_data|has_space] functions.

Q: Is exploitation of CVE-2025-21666 possible remotely?

Exploitation of CVE-2025-21666 typically requires local access to the affected system.

Published Jan 31, 2025

Updated

In the Linux kernel, the following vulnerability has been resolved:

vsock: prevent null-ptr-deref in vsock[hasdata|hasspace]

Recent reports have shown how we sometimes call vsockhasdata() when a vsock socket has been de-assigned from a transport (see attached links), but we shouldn't.

Previous commits should have solved the real problems, but we may have more in the future, so to avoid null-ptr-deref, we can return 0 (no space, no data available) but with a warning.

This way the code should continue to run in a nearly consistent state and have a warning that allows us to debug future problems.

Affected Software

171 affected componentsFixes available

Linux Linux kernel

Linux Linux kernel>=5.5<5.15.177

Linux Linux kernel>=5.16<6.1.127

Linux Linux kernel>=6.2<6.6.74

Linux Linux kernel>=6.7<6.12.11

Linux Linux kernel=6.13-rc1

Linux Linux kernel=6.13-rc2

Linux Linux kernel=6.13-rc3

Linux Linux kernel=6.13-rc4

Linux Linux kernel=6.13-rc5

Linux Linux kernel=6.13-rc6

Linux Linux kernel=6.13-rc7

Microsoft cbl2 kernel 5.15.176.3-3

Patch available

Microsoft cbl2 kernel 5.15.180.1-1

Patch available

Microsoft azl3 kernel 6.6.64.2-9

Patch available

Microsoft cbl2 kernel 5.15.176.3-3

Patch available

Microsoft azl3 kernel 6.6.76.1-1

Patch available

ubuntu/linux-hwe-edge*

ubuntu/linux-aws-5.0*

ubuntu/linux-aws-5.3*

ubuntu/linux-azure*

ubuntu/linux-azure-5.3*

ubuntu/linux-azure-edge*

ubuntu/linux-gcp*

ubuntu/linux-gcp-5.3*

ubuntu/linux-gke-4.15*

ubuntu/linux-gke-5.4*

ubuntu/linux-gkeop-5.4*

ubuntu/linux-hwe*

ubuntu/linux-hwe-edge*

ubuntu/linux-oem*

ubuntu/linux-oracle-5.0*

ubuntu/linux-oracle-5.3*

ubuntu/linux-aws-5.15<5.15.0-1080.87~20.04.1

5.15.0-1080.87~20.04.1

ubuntu/linux-azure-5.15<5.15.0-1086.95~20.04.1

5.15.0-1086.95~20.04.1

ubuntu/linux-gcp-5.15<5.15.0-1081.90~20.04.1

5.15.0-1081.90~20.04.1

ubuntu/linux-hwe-5.15<5.15.0-136.147~20.04.1

5.15.0-136.147~20.04.1

ubuntu/linux-ibm-5.15<5.15.0-1074.77~20.04.1

5.15.0-1074.77~20.04.1

ubuntu/linux-intel-iotg-5.15<5.15.0-1077.83~20.04.1

5.15.0-1077.83~20.04.1

ubuntu/linux-lowlatency-hwe-5.15<5.15.0-135.146~20.04.1

5.15.0-135.146~20.04.1

ubuntu/linux-oracle-5.15<5.15.0-1077.83~20.04.1

5.15.0-1077.83~20.04.1

ubuntu/linux-riscv-5.15<5.15.0-1075.79~20.04.1

5.15.0-1075.79~20.04.1

ubuntu/linux-aws-5.11*

ubuntu/linux-aws-5.13*

ubuntu/linux-aws-5.8*

ubuntu/linux-azure-5.11*

ubuntu/linux-azure-5.13*

ubuntu/linux-azure-5.8*

ubuntu/linux-azure-fde*

ubuntu/linux-gcp-5.11*

ubuntu/linux-gcp-5.13*

ubuntu/linux-gcp-5.8*

ubuntu/linux-gke*

ubuntu/linux-gke-5.15*

ubuntu/linux-gkeop*

ubuntu/linux-gkeop-5.15*

ubuntu/linux-hwe-5.11*

ubuntu/linux-hwe-5.13*

ubuntu/linux-hwe-5.8*

ubuntu/linux-intel-5.13*

ubuntu/linux-nvidia-tegra-5.15<5.15.0-1039.39~20.04.1

5.15.0-1039.39~20.04.1

ubuntu/linux-oem-5.10*

ubuntu/linux-oem-5.13*

ubuntu/linux-oem-5.6*

ubuntu/linux-oracle-5.11*

ubuntu/linux-oracle-5.13*

ubuntu/linux-oracle-5.8*

ubuntu/linux-raspi2*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.11*

ubuntu/linux-riscv-5.8*

ubuntu/linux<5.15.0-135.146

5.15.0-135.146

ubuntu/linux-allwinner-5.19*

ubuntu/linux-aws<5.15.0-1080.87

5.15.0-1080.87

ubuntu/linux-aws-5.19*

ubuntu/linux-aws-6.2*

ubuntu/linux-aws-6.5*

ubuntu/linux-aws-6.8<6.8.0-1030.32~22.04.1

6.8.0-1030.32~22.04.1

ubuntu/linux-azure<5.15.0-1084.93

5.15.0-1084.93

ubuntu/linux-azure-5.19*

ubuntu/linux-azure-6.2*

ubuntu/linux-azure-6.5*

ubuntu/linux-azure-6.8<6.8.0-1030.35~22.04.1

6.8.0-1030.35~22.04.1

ubuntu/linux-azure-fde<5.15.0-1084.93.1

5.15.0-1084.93.1

ubuntu/linux-azure-fde-5.19*

ubuntu/linux-azure-fde-6.2*

ubuntu/linux-gcp<5.15.0-1079.88

5.15.0-1079.88

ubuntu/linux-gcp-5.19*

ubuntu/linux-gcp-6.2*

ubuntu/linux-gcp-6.5*

ubuntu/linux-gcp-6.8<6.8.0-1031.33~22.04.1

6.8.0-1031.33~22.04.1

ubuntu/linux-gke<5.15.0-1077.83

5.15.0-1077.83

ubuntu/linux-gkeop<5.15.0-1062.70

5.15.0-1062.70

ubuntu/linux-hwe-5.19*

ubuntu/linux-hwe-6.2*

ubuntu/linux-hwe-6.5*

ubuntu/linux-hwe-6.8<6.8.0-64.67~22.04.1

6.8.0-64.67~22.04.1

ubuntu/linux-ibm<5.15.0-1072.75

5.15.0-1072.75

ubuntu/linux-ibm-6.8<6.8.0-1027.27~22.04.1

6.8.0-1027.27~22.04.1

ubuntu/linux-intel-iot-realtime<5.15.0-1073.75

5.15.0-1073.75

ubuntu/linux-intel-iotg<5.15.0-1075.81

5.15.0-1075.81

ubuntu/linux-kvm<5.15.0-1076.81

5.15.0-1076.81

ubuntu/linux-lowlatency<5.15.0-135.146

5.15.0-135.146

ubuntu/linux-lowlatency-hwe-5.19*

ubuntu/linux-lowlatency-hwe-6.2*

ubuntu/linux-lowlatency-hwe-6.5*

ubuntu/linux-lowlatency-hwe-6.8<6.8.0-62.65.1~22.04.1

6.8.0-62.65.1~22.04.1

ubuntu/linux-nvidia<5.15.0-1074.75

5.15.0-1074.75

ubuntu/linux-nvidia-6.2*

ubuntu/linux-nvidia-6.5*

ubuntu/linux-nvidia-6.8<6.8.0-1029.32~22.04.1

6.8.0-1029.32~22.04.1

ubuntu/linux-nvidia-tegra<5.15.0-1033.33

5.15.0-1033.33

ubuntu/linux-nvidia-tegra-igx<5.15.0-1021.21

5.15.0-1021.21

ubuntu/linux-oem-5.17*

ubuntu/linux-oem-6.0*

ubuntu/linux-oem-6.1*

ubuntu/linux-oem-6.5*

ubuntu/linux-oracle<5.15.0-1077.83

5.15.0-1077.83

ubuntu/linux-oracle-6.5*

ubuntu/linux-oracle-6.8<6.8.0-1027.28~22.04.1

6.8.0-1027.28~22.04.1

ubuntu/linux-raspi<5.15.0-1074.77

5.15.0-1074.77

ubuntu/linux-realtime*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.19*

ubuntu/linux-riscv-6.5*

ubuntu/linux-riscv-6.8<6.8.0-62.65~22.04.1

6.8.0-62.65~22.04.1

ubuntu/linux-starfive-5.19*

ubuntu/linux-starfive-6.2*

ubuntu/linux-starfive-6.5*

ubuntu/linux-xilinx-zynqmp<5.15.0-1044.48

5.15.0-1044.48

ubuntu/linux-bluefield<5.15.0-1062.64

5.15.0-1062.64

ubuntu/linux-realtime<5.15.0-1080.88

5.15.0-1080.88

ubuntu/linux-realtime-6.8<6.8.1-1023.24~22.04.1

6.8.1-1023.24~22.04.1

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux-aws-fips<5.15.0-1080.87+fips1

5.15.0-1080.87+fips1

ubuntu/linux-azure-fips<5.15.0-1083.92+fips1

5.15.0-1083.92+fips1

ubuntu/linux-fips<5.15.0-135.146+fips1

5.15.0-135.146+fips1

ubuntu/linux-gcp-fips<5.15.0-1079.88+fips1

5.15.0-1079.88+fips1

ubuntu/linux<6.8.0-62.65

6.8.0-62.65

ubuntu/linux-aws<6.8.0-1030.32

6.8.0-1030.32

ubuntu/linux-azure<6.8.0-1030.35

6.8.0-1030.35

ubuntu/linux-azure-6.11<6.11.0-1013.13~24.04.1

6.11.0-1013.13~24.04.1

ubuntu/linux-azure-nvidia<6.8.0-1018.19

6.8.0-1018.19

ubuntu/linux-gcp<6.8.0-1031.33

6.8.0-1031.33

ubuntu/linux-gcp-6.11<6.11.0-1013.13~24.04.1

6.11.0-1013.13~24.04.1

ubuntu/linux-gke<6.8.0-1026.30

6.8.0-1026.30

ubuntu/linux-gkeop<6.8.0-1013.15

6.8.0-1013.15

ubuntu/linux-hwe-6.11<6.11.0-24.24~24.04.1

6.11.0-24.24~24.04.1

ubuntu/linux-ibm<6.8.0-1027.27

6.8.0-1027.27

ubuntu/linux-lowlatency<6.8.0-62.65.1

6.8.0-62.65.1

ubuntu/linux-lowlatency-hwe-6.11<6.11.0-1012.13~24.04.1

6.11.0-1012.13~24.04.1

ubuntu/linux-nvidia<6.8.0-1029.32

6.8.0-1029.32

ubuntu/linux-nvidia-6.11<6.11.0-1007.7

6.11.0-1007.7

ubuntu/linux-nvidia-lowlatency<6.8.0-1029.32.1

6.8.0-1029.32.1

ubuntu/linux-nvidia-tegra<6.8.0-1008.8

6.8.0-1008.8

ubuntu/linux-oem-6.11<6.11.0-1020.20

6.11.0-1020.20

ubuntu/linux-oem-6.8<6.8.0-1029.29

6.8.0-1029.29

ubuntu/linux-oracle<6.8.0-1027.28

6.8.0-1027.28

ubuntu/linux-raspi<6.8.0-1029.33

6.8.0-1029.33

ubuntu/linux-raspi-realtime*

ubuntu/linux-realtime*

ubuntu/linux-riscv*

ubuntu/linux-xilinx<6.8.0-1017.18

6.8.0-1017.18

ubuntu/linux-raspi-realtime<6.8.0-2024.25

6.8.0-2024.25

ubuntu/linux-realtime<6.8.1-1023.24

6.8.1-1023.24

ubuntu/linux-fips<6.8.0-78.78+fips1

6.8.0-78.78+fips1

ubuntu/linux-vmware*

debian/linux

6.1.176-16.1.190-16.12.107-16.12.116-17.2.15-17.3.4-1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.116-1Fixed in 7.2.15-1Fixed in 7.3.3-1
Upgrade
Upgrade ubuntu/linux-aws-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1080.87~20.04.1
Upgrade
Upgrade ubuntu/linux-azure-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1086.95~20.04.1
Upgrade
Upgrade ubuntu/linux-gcp-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1081.90~20.04.1
Upgrade
Upgrade ubuntu/linux-hwe-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-136.147~20.04.1
Upgrade
Upgrade ubuntu/linux-ibm-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1074.77~20.04.1
Upgrade
Upgrade ubuntu/linux-intel-iotg-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1077.83~20.04.1
Upgrade
Upgrade ubuntu/linux-lowlatency-hwe-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-135.146~20.04.1
Upgrade
Upgrade ubuntu/linux-oracle-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1077.83~20.04.1
Upgrade
Upgrade ubuntu/linux-riscv-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1075.79~20.04.1
Upgrade
Upgrade ubuntu/linux-nvidia-tegra-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1039.39~20.04.1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 5.15.0-135.146
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 5.15.0-1080.87
Upgrade
Upgrade ubuntu/linux-aws-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1030.32~22.04.1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 5.15.0-1084.93
Upgrade
Upgrade ubuntu/linux-azure-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1030.35~22.04.1
Upgrade
Upgrade ubuntu/linux-azure-fde to a version that resolves this vulnerability.
Fixed in 5.15.0-1084.93.1
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 5.15.0-1079.88
Upgrade
Upgrade ubuntu/linux-gcp-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1031.33~22.04.1
Upgrade
Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.
Fixed in 5.15.0-1077.83
Upgrade
Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.
Fixed in 5.15.0-1062.70
Upgrade
Upgrade ubuntu/linux-hwe-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-64.67~22.04.1
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 5.15.0-1072.75
Upgrade
Upgrade ubuntu/linux-ibm-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1027.27~22.04.1
Upgrade
Upgrade ubuntu/linux-intel-iot-realtime to a version that resolves this vulnerability.
Fixed in 5.15.0-1073.75
Upgrade
Upgrade ubuntu/linux-intel-iotg to a version that resolves this vulnerability.
Fixed in 5.15.0-1075.81
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 5.15.0-1076.81
Upgrade
Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.
Fixed in 5.15.0-135.146
Upgrade
Upgrade ubuntu/linux-lowlatency-hwe-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-62.65.1~22.04.1
Upgrade
Upgrade ubuntu/linux-nvidia to a version that resolves this vulnerability.
Fixed in 5.15.0-1074.75
Upgrade
Upgrade ubuntu/linux-nvidia-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1029.32~22.04.1
Upgrade
Upgrade ubuntu/linux-nvidia-tegra to a version that resolves this vulnerability.
Fixed in 5.15.0-1033.33
Upgrade
Upgrade ubuntu/linux-nvidia-tegra-igx to a version that resolves this vulnerability.
Fixed in 5.15.0-1021.21
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 5.15.0-1077.83
Upgrade
Upgrade ubuntu/linux-oracle-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1027.28~22.04.1
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 5.15.0-1074.77
Upgrade
Upgrade ubuntu/linux-riscv-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-62.65~22.04.1
Upgrade
Upgrade ubuntu/linux-xilinx-zynqmp to a version that resolves this vulnerability.
Fixed in 5.15.0-1044.48
Upgrade
Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.
Fixed in 5.15.0-1062.64
Upgrade
Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.
Fixed in 5.15.0-1080.88
Upgrade
Upgrade ubuntu/linux-realtime-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.1-1023.24~22.04.1
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-1080.87+fips1
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-1083.92+fips1
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-135.146+fips1
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-1079.88+fips1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 6.8.0-62.65
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 6.8.0-1030.32
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 6.8.0-1030.35
Upgrade
Upgrade ubuntu/linux-azure-6.11 to a version that resolves this vulnerability.
Fixed in 6.11.0-1013.13~24.04.1
Upgrade
Upgrade ubuntu/linux-azure-nvidia to a version that resolves this vulnerability.
Fixed in 6.8.0-1018.19
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 6.8.0-1031.33
Upgrade
Upgrade ubuntu/linux-gcp-6.11 to a version that resolves this vulnerability.
Fixed in 6.11.0-1013.13~24.04.1
Upgrade
Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.
Fixed in 6.8.0-1026.30
Upgrade
Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.
Fixed in 6.8.0-1013.15
Upgrade
Upgrade ubuntu/linux-hwe-6.11 to a version that resolves this vulnerability.
Fixed in 6.11.0-24.24~24.04.1
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 6.8.0-1027.27
Upgrade
Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.
Fixed in 6.8.0-62.65.1
Upgrade
Upgrade ubuntu/linux-lowlatency-hwe-6.11 to a version that resolves this vulnerability.
Fixed in 6.11.0-1012.13~24.04.1
Upgrade
Upgrade ubuntu/linux-nvidia to a version that resolves this vulnerability.
Fixed in 6.8.0-1029.32
Upgrade
Upgrade ubuntu/linux-nvidia-6.11 to a version that resolves this vulnerability.
Fixed in 6.11.0-1007.7
Upgrade
Upgrade ubuntu/linux-nvidia-lowlatency to a version that resolves this vulnerability.
Fixed in 6.8.0-1029.32.1
Upgrade
Upgrade ubuntu/linux-nvidia-tegra to a version that resolves this vulnerability.
Fixed in 6.8.0-1008.8
Upgrade
Upgrade ubuntu/linux-oem-6.11 to a version that resolves this vulnerability.
Fixed in 6.11.0-1020.20
Upgrade
Upgrade ubuntu/linux-oem-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1029.29
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 6.8.0-1027.28
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 6.8.0-1029.33
Upgrade
Upgrade ubuntu/linux-xilinx to a version that resolves this vulnerability.
Fixed in 6.8.0-1017.18
Upgrade
Upgrade ubuntu/linux-raspi-realtime to a version that resolves this vulnerability.
Fixed in 6.8.0-2024.25
Upgrade
Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.
Fixed in 6.8.1-1023.24
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 6.8.0-78.78+fips1
Compensating control
In vsock_*_has_data() and vsock_*_has_space(), return 0 and issue a warning when the vsock socket has been de-assigned from its transport, preventing a null-pointer dereference while preserving a diagnostic warning.

Event History

Jan 31, 2025

CVE Published

via MITRE·11:25 AM

Data Sourced

via MITRE·11:25 AM

Description

Data Sourced

via Red Hat·12:01 PM

DescriptionSeverityAffected Software

Data Sourced

via OSV·12:15 PM

DescriptionSeverityAffected Software

Data Sourced

via NVD·12:15 PM

RemedyDescriptionSeverityWeaknessAffected Software

Mar 14, 2025

Data Sourced

via Microsoft·07:00 AM

DescriptionSeverityWeakness

Data Sourced

via Microsoft·07:00 AM

Affected Software

Parent advisories

This vulnerability appears in the following advisories.

DSA-5860

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

What is the severity of CVE-2025-21666?

CVE-2025-21666 is classified as a moderate severity vulnerability.

How do I fix CVE-2025-21666?

To fix CVE-2025-21666, you should update your Linux kernel to the latest stable version that resolves this issue.

Which versions of the Linux kernel are affected by CVE-2025-21666?

CVE-2025-21666 affects Linux kernel versions from 5.5 up to 6.13-rc7.

What kind of issue does CVE-2025-21666 address?

CVE-2025-21666 addresses a null pointer dereference in the vsock_*[has_data|has_space] functions.

Is exploitation of CVE-2025-21666 possible remotely?

Exploitation of CVE-2025-21666 typically requires local access to the affected system.

CVE-2025-21666: vsock: prevent null-ptr-deref in vsock_*[has_data|has_space]

Affected Software

Remediation

Event History

Parent advisories

Peer vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2025-21666?

How do I fix CVE-2025-21666?

Which versions of the Linux kernel are affected by CVE-2025-21666?

What kind of issue does CVE-2025-21666 address?

Is exploitation of CVE-2025-21666 possible remotely?

Company

Resources

Contact