Linux Kernel Vulnerability in Vsock Transport Mechanism

CVE-2025-21755

What is CVE-2025-21755?

A vulnerability in the Linux kernel's vsock transport mechanism allows for a null pointer dereference during the socket release process. This occurs because the function sock_orphan() is invoked without properly managing the socket's state, resulting in sk->sk_wq being set to NULL. If the SO_LINGER option is enabled, this improper handling leads to dereferencing a null pointer in virtio_transport_wait_close(), which can cause system instability and vulnerabilities. The issue primarily affects sockets after transport release, necessitating careful management of resource release to ensure system integrity.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References