Bug 2343169 (CVE-2025-21669) - CVE-2025-21669 kernel: vsock/virtio: discard packets if the transport changes
Summary: CVE-2025-21669 kernel: vsock/virtio: discard packets if the transport changes
Keywords:
Status: NEW
Alias: CVE-2025-21669
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2025-01-31 12:01 UTC by OSIDB Bzimport
Modified: 2025-06-09 12:55 UTC (History)
4 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2025:6966 0 None None None 2025-05-13 08:39:04 UTC
Red Hat Product Errata RHSA-2025:8669 0 None None None 2025-06-09 12:55:40 UTC

Description OSIDB Bzimport 2025-01-31 12:01:35 UTC
In the Linux kernel, the following vulnerability has been resolved:

vsock/virtio: discard packets if the transport changes

If the socket has been de-assigned or assigned to another transport,
we must discard any packets received because they are not expected
and would cause issues when we access vsk->transport.

A possible scenario is described by Hyunwoo Kim in the attached link,
where after a first connect() interrupted by a signal, and a second
connect() failed, we can find `vsk->transport` at NULL, leading to a
NULL pointer dereference.

Comment 3 errata-xmlrpc 2025-05-13 08:39:03 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2025:6966 https://access.redhat.com/errata/RHSA-2025:6966

Comment 4 errata-xmlrpc 2025-06-09 12:55:38 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2025:8669 https://access.redhat.com/errata/RHSA-2025:8669


Note You need to log in before you can comment on or make changes to this bug.