CVE-2025-22063: netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets
In the Linux kernel, the following vulnerability has been resolved:
netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets
When calling netlblconnsetattr(), addr->safamily is used to determine the function behavior. If sk is an IPv4 socket, but the connect function is called with an IPv6 address, the function calipsosocksetattr() is triggered. Inside this function, the following code is executed:
skfullsock(sk) ? inetsk(sk)->pinet6 : NULL;
Since sk is an IPv4 socket, pinet6 is NULL, leading to a null pointer dereference.
This patch fixes the issue by checking if inet6sk(sk) returns a NULL pointer before accessing pinet6.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.92.2-1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 5.15.180.1-1
Event History
Frequently Asked Questions
What is the severity of CVE-2025-22063?
CVE-2025-22063 is considered a medium severity vulnerability due to the potential for a NULL pointer dereference.
How do I fix CVE-2025-22063?
To fix CVE-2025-22063, it is recommended to update the Linux kernel to a version that includes the patch addressing this vulnerability.
What systems are affected by CVE-2025-22063?
CVE-2025-22063 affects Linux kernel versions that utilize IPv4 sockets and the netlbl_conn_setattr() function.
What type of vulnerability is CVE-2025-22063?
CVE-2025-22063 is a NULL pointer dereference vulnerability in the Linux kernel networking subsystem.
Is there a known exploit for CVE-2025-22063?
As of now, there is no publicly known exploit for CVE-2025-22063, but it should be addressed promptly to prevent potential exploitation.