CVE-2025-21670

Summary

CVE-2025-21670 is a Linux kernel vulnerability that was recently addressed. The issue lies in the vsock subsystem, where a socket's transport could be null, causing a kernel NULL pointer dereference. This can occur after a failed connection attempt. Core functions in vsock can only be invoked if the transport has been assigned. Consequently, checking the `vsk->transport` in vsock_bpf_recvmsg(), specifically for connected sockets, is necessary to prevent this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.