CVE-2025-0665

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-0665
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-0665.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-0665
Aliases
Downstream
ALPINE (1)
AZL (1)
BELL (1)
CGA (3)
CLEANSTART (7)
DEBIAN (1)
JLSEC (1)
MGASA (1)
MINI (1)
openSUSE (1)
SUSE (2)
UBUNTU (1)
Related
openSUSE (1)
SUSE (2)
Published
2025-02-05T09:16:49Z
Modified
2026-10-24T10:35:14Z
Severity
  • 7.0 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H CVSS Calculator
Summary
eventfd double close
Details

libcurl would wrongly close the same eventfd file descriptor twice when taking down a connection channel after having completed a threaded name resolve.

Database specific 
{
    "cna_assigner": "curl",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/0xxx/CVE-2025-0665.json",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "range": [
                        {
                            "introduced": "8.11.1"
                        },
                        {
                            "last_affected": "8.11.1"
                        }
                    ],
                    "source": "AFFECTED_FIELD",
                    "strategy": "StandaloneSingleVersion"
                }
            ]
        }
    ]
}
References

Affected packages

Git / github.com/curl/curl

Affected ranges

Type
GIT
Repo
https://github.com/curl/curl
Events
Introduced
75a2079d5c28debb2eaa848ca9430f1fe0d7844c
Last Affected
75a2079d5c28debb2eaa848ca9430f1fe0d7844c
Database specific
Show details 
{
    "extracted_events": [
        {
            "cpe": "cpe:2.3:a:haxx:curl:8.11.1:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "8.11.1"
                },
                {
                    "last_affected": "8.11.1"
                }
            ],
            "source": "CPE_STRING"
        }
    ]
}

Affected versions

8.*
8.11.1
Other
curl-8_11_1

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-0665.json"