7.8

CVE-2025-21669: linux NULL Pointer Dereference

CVSS: 7.8v3.1HighModified
AliasesUBUNTU-CVE-2025-21669DEBIAN-CVE-2025-21669
Published 31-01-2025Last modified 15-10-2026
Open JSON

Vulnerability summary

CVE-2025-21669 is a high (CVSS 7.8) NULL Pointer Dereference vulnerability in linux. EPSS estimates a 0.23% chance of exploitation in the next 30 days, higher than 13.3% of scored vulnerabilities.

Overall risk
31/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.8/10
010
High · v3.1 (CVE.org)
EPSS score
0.23%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 34 · Related 29
DLA-4075-1DLA-4076-1DSA-5860-1RHSA-2025:6966RHSA-2025:8669SUSE-SU-2025:0499-1

Timeline

  1. 31-01-2025
    PublishedVulnerability first disclosed.
  2. 15-10-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: discard packets if the transport changes If the socket has been de-assigned or assigned to another transport, we must discard any packets received because they are not expected and would cause issues when we access vsk->transport. A possible scenario is described by Hyunwoo Kim in the attached link, where after a first connect() interrupted by a signal, and a second connect() failed, we can find `vsk->transport` at NULL, leading to a NULL pointer dereference.

CVSS metrics

4 scores · 4 sources · 1 version

EPSS trend

Probability

0.23%

Chance of exploitation in the next 30 days

Percentile

13%

Versus all other CVEs

30-day change

0.00 pp

From 0.23% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.23%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu124 products
  • linux< 5.15.0-135.146 | < 6.8.0-62.65
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-aws< 5.15.0-1080.87 | < 6.8.0-1030.32
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ c0cfa2d8a788fcf45df5bf4070ab2474c88d543a, < 18a7fc371d1dbf8deff16c2dd9292bcc73f43040 | ≥ c0cfa2d8a788fcf45df5bf4070ab2474c88d543a, < 6486915fa661584d70e8e7e4068c6c075c67dd6d | ≥ c0cfa2d8a788fcf45df5bf4070ab2474c88d543a, < 88244163bc7e7b0ce9dd7bf4c8a563b41525c3ee | ≥ c0cfa2d8a788fcf45df5bf4070ab2474c88d543a, < d88b249e14bd0ee1e46bbe4f456e22e01b8c68de | ≥ c0cfa2d8a788fcf45df5bf4070ab2474c88d543a, < 677579b641af109613564460a4e3bdcb16850b61 | ≥ c0cfa2d8a788fcf45df5bf4070ab2474c88d543a, < 2cb7c756f605ec02ffe562fb26828e4bcc5fdfc1 | 5.5
  • linux_kernel≥ 5.5, < 5.15.177 | ≥ 5.16, < 6.1.127 | ≥ 6.2, < 6.6.74 | ≥ 6.7, < 6.12.11 | 6.13:rc1 | 6.13:rc2 | 6.13:rc3 | 6.13:rc4 | 6.13:rc5 | 6.13:rc6 | 6.13:rc7
Debian1 product
  • linux< 6.1.128-1 | < 6.12.11-1

3 vendors · 127 products

References

35 links
Show all 35 references