CVE-2025-21669

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a NULL pointer dereference in the Linux kernel's vsock/virtio module. This can occur when the socket has been de-assigned or assigned to another transport, and packets are received that are not expected, causing issues when accessing vsk->transport. A possible scenario involves a first connect() interrupted by a signal, and a second connect() failed, leading to vsk->transport being NULL.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.