{"id":"CVE-2025-21666","revision":"81424857f5b545a08ece13569ef55ad6","records":[{"revision":"81424857f5b545a08ece13569ef55ad6","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2025-21666","aliases":[],"title":"vsock: prevent null-ptr-deref in vsock_*[has_data|has_space]","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nvsock: prevent null-ptr-deref in vsock_*[has_data|has_space]\n\nRecent reports have shown how we sometimes call vsock_*_has_data()\nwhen a vsock socket has been de-assigned from a transport (see attached\nlinks), but we shouldn't.\n\nPrevious commits should have solved the real problems, but we may have\nmore in the future, so to avoid null-ptr-deref, we can return 0\n(no space, no data available) but with a warning.\n\nThis way the code should continue to run in a nearly consistent state\nand have a warning that allows us to debug future problems.","state":0,"publishedAt":"2025-01-31T11:25:31.138+00:00","modifiedAt":"2026-10-15T01:02:53.911+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"net/vmw_vsock/af_vsock.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"c0cfa2d8a788fcf45df5bf4070ab2474c88d543a\",\n                            \"lessThan\": \"daeac89cdb03d30028186f5ff7dc26ec8fa843e7\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"c0cfa2d8a788fcf45df5bf4070ab2474c88d543a\",\n                            \"lessThan\": \"9e5fed46ccd2c34c5fa5a9c8825ce4823fdc853e\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"c0cfa2d8a788fcf45df5bf4070ab2474c88d543a\",\n                            \"lessThan\": \"b52e50dd4fabd12944172bd486a4f4853b7f74dd\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"c0cfa2d8a788fcf45df5bf4070ab2474c88d543a\",\n                            \"lessThan\": \"bc9c49341f9728c31fe248c5fbba32d2e81a092b\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"c0cfa2d8a788fcf45df5bf4070ab2474c88d543a\",\n                            \"lessThan\": \"c23d1d4f8efefb72258e9cedce29de10d057f8ca\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"c0cfa2d8a788fcf45df5bf4070ab2474c88d543a\",\n                            \"lessThan\": \"91751e248256efc111e52e15115840c35d85abaf\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"net/vmw_vsock/af_vsock.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"5.5\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"5.5\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.10.234\",\n                            \"lessThanOrEqual\": \"5.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.177\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.127\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.74\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.11\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.13\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/daeac89cdb03d30028186f5ff7dc26ec8fa843e7","https://git.kernel.org/stable/c/9e5fed46ccd2c34c5fa5a9c8825ce4823fdc853e","https://git.kernel.org/stable/c/b52e50dd4fabd12944172bd486a4f4853b7f74dd","https://git.kernel.org/stable/c/bc9c49341f9728c31fe248c5fbba32d2e81a092b","https://git.kernel.org/stable/c/c23d1d4f8efefb72258e9cedce29de10d057f8ca","https://git.kernel.org/stable/c/91751e248256efc111e52e15115840c35d85abaf"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-21666","license":"CVE Program Terms of Use","key":"cve-program:CVE-2025-21666","identifiers":["CVE-2025-21666"]},"retained":false,"historicalAffected":[]}],"coverage":[]}