CVE-2025-21666

Summary

CVE-2025-21666: A vulnerability was identified in the Linux kernel that could result in null-pointer dereferencing during the use of vsock sockets. This issue stems from calling vsock_*_has_data() on a socket that has been de-assigned from a transport. Previous commit attempts to resolve related issues, but further instances may exist. To mitigate this risk, the code now returns 0 when no data or space is available, along with a warning, ensuring the code continues to function while providing a debugging tool for future problems.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.