CVE-2025-22063

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Apr 16, 2025
Updated: Apr 29, 2025
CWE ID 476

Summary

CVE-2025-22063 is a vulnerability in the Linux kernel where a NULL pointer exception occurs when using CALIPSO on IPv4 sockets. The issue arises when the netlbl_conn_setattr() function is called with an IPv6 address for an IPv4 socket. In the calipso_sock_setattr() function, a null pointer dereference happens as pinet6, which should contain the IPv6 information, is null for IPv4 sockets. This patch resolves the issue by checking for a NULL pointer return from inet6_sk(sk) before accessing pinet6.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share