libcurl would wrongly close the same eventfd file descriptor twice when taking down a connection channel after having completed a threaded name resolve.
{
"affects": "both",
"severity": "Low",
"www": "https://curl.se/docs/CVE-2025-0665.html",
"CWE": {
"id": "CWE-1341",
"desc": "Multiple Releases of Same Resource or Handle"
},
"award": {
"currency": "USD",
"amount": "505"
},
"URL": "https://curl.se/docs/CVE-2025-0665.json",
"issue": "https://hackerone.com/reports/2954286",
"package": "curl",
"last_affected": "8.11.1"
}