Linux Kernel Vulnerability Affecting Socket Transport Management

CVE-2025-21669

Summary

In the Linux kernel, a flaw in the vsock/virtio component may result in unintended behavior when socket assignments change. Specifically, if a socket is either de-assigned or reassigned, any incoming packets could lead to a NULL pointer dereference if vsk->transport is not properly validated. This issue can arise under conditions where a first connection attempt is disrupted and a subsequent attempt fails, leaving vsk->transport set to NULL. The implications of this vulnerability could lead to application instability and security risks. It is essential for users running affected Linux kernel versions to apply the latest security updates to mitigate potential threats.

References