In the Linux kernel, the following vulnerability has been resolved:
vsock: prevent null-ptr-deref in vsock*[hasdata|has_space]
Recent reports have shown how we sometimes call vsock*has_data() when a vsock socket has been de-assigned from a transport (see attached links), but we shouldn't.
Previous commits should have solved the real problems, but we may have more in the future, so to avoid null-ptr-deref, we can return 0 (no space, no data available) but with a warning.
This way the code should continue to run in a nearly consistent state and have a warning that allows us to debug future problems.
[
{
"id": "CVE-2025-21666-05a855c9",
"digest": {
"line_hashes": [
"108537343070897196491939357969924052287",
"219544903924714015283193098649942645194",
"220036159885546337357750522596612193410",
"135599186596389849067884391407207732660",
"212456964666857365482945530957761497064",
"54147384121960577038970272052598350994",
"231747496091312138784112211416952369489",
"65585572287803123538157571937803217270",
"302303224355861565559186072029530735708",
"269175991236061443366114574685023241359",
"148263024296509174525456907731875002582"
],
"threshold": 0.9
},
"signature_type": "Line",
"target": {
"file": "net/vmw_vsock/af_vsock.c"
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c23d1d4f8efefb72258e9cedce29de10d057f8ca"
},
{
"id": "CVE-2025-21666-0875ac48",
"digest": {
"length": 94.0,
"function_hash": "195405411828109698325017726757026141280"
},
"signature_type": "Function",
"target": {
"file": "net/vmw_vsock/af_vsock.c",
"function": "vsock_stream_has_space"
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@daeac89cdb03d30028186f5ff7dc26ec8fa843e7"
},
{
"id": "CVE-2025-21666-1de9cbc2",
"digest": {
"length": 93.0,
"function_hash": "149776090751625789771979985530763130440"
},
"signature_type": "Function",
"target": {
"file": "net/vmw_vsock/af_vsock.c",
"function": "vsock_stream_has_data"
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@91751e248256efc111e52e15115840c35d85abaf"
},
{
"id": "CVE-2025-21666-22b6e154",
"digest": {
"line_hashes": [
"108537343070897196491939357969924052287",
"219544903924714015283193098649942645194",
"220036159885546337357750522596612193410",
"135599186596389849067884391407207732660",
"220035155335039281566854062389423131484",
"54147384121960577038970272052598350994",
"231747496091312138784112211416952369489",
"283642173729706989832748046159582291521",
"191106106481670399555577623446782279262",
"269175991236061443366114574685023241359",
"148263024296509174525456907731875002582"
],
"threshold": 0.9
},
"signature_type": "Line",
"target": {
"file": "net/vmw_vsock/af_vsock.c"
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b52e50dd4fabd12944172bd486a4f4853b7f74dd"
},
{
"id": "CVE-2025-21666-400ab524",
"digest": {
"length": 94.0,
"function_hash": "195405411828109698325017726757026141280"
},
"signature_type": "Function",
"target": {
"file": "net/vmw_vsock/af_vsock.c",
"function": "vsock_stream_has_space"
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9e5fed46ccd2c34c5fa5a9c8825ce4823fdc853e"
},
{
"id": "CVE-2025-21666-50783b09",
"digest": {
"line_hashes": [
"108537343070897196491939357969924052287",
"219544903924714015283193098649942645194",
"220036159885546337357750522596612193410",
"135599186596389849067884391407207732660",
"212456964666857365482945530957761497064",
"54147384121960577038970272052598350994",
"231747496091312138784112211416952369489",
"65585572287803123538157571937803217270",
"302303224355861565559186072029530735708",
"269175991236061443366114574685023241359",
"148263024296509174525456907731875002582"
],
"threshold": 0.9
},
"signature_type": "Line",
"target": {
"file": "net/vmw_vsock/af_vsock.c"
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bc9c49341f9728c31fe248c5fbba32d2e81a092b"
},
{
"id": "CVE-2025-21666-6983e705",
"digest": {
"line_hashes": [
"108537343070897196491939357969924052287",
"219544903924714015283193098649942645194",
"220036159885546337357750522596612193410",
"135599186596389849067884391407207732660",
"212456964666857365482945530957761497064",
"54147384121960577038970272052598350994",
"231747496091312138784112211416952369489",
"65585572287803123538157571937803217270",
"302303224355861565559186072029530735708",
"269175991236061443366114574685023241359",
"148263024296509174525456907731875002582"
],
"threshold": 0.9
},
"signature_type": "Line",
"target": {
"file": "net/vmw_vsock/af_vsock.c"
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@91751e248256efc111e52e15115840c35d85abaf"
},
{
"id": "CVE-2025-21666-6f56367f",
"digest": {
"length": 94.0,
"function_hash": "195405411828109698325017726757026141280"
},
"signature_type": "Function",
"target": {
"file": "net/vmw_vsock/af_vsock.c",
"function": "vsock_stream_has_space"
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@91751e248256efc111e52e15115840c35d85abaf"
},
{
"id": "CVE-2025-21666-7204e5a6",
"digest": {
"line_hashes": [
"108537343070897196491939357969924052287",
"219544903924714015283193098649942645194",
"220036159885546337357750522596612193410",
"135599186596389849067884391407207732660",
"280413480042294025328642498350087129799",
"170114627176419719052262289223582420593",
"95693741275982399187666668432146827058",
"269175991236061443366114574685023241359",
"148263024296509174525456907731875002582"
],
"threshold": 0.9
},
"signature_type": "Line",
"target": {
"file": "net/vmw_vsock/af_vsock.c"
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@daeac89cdb03d30028186f5ff7dc26ec8fa843e7"
},
{
"id": "CVE-2025-21666-757ba58b",
"digest": {
"length": 94.0,
"function_hash": "195405411828109698325017726757026141280"
},
"signature_type": "Function",
"target": {
"file": "net/vmw_vsock/af_vsock.c",
"function": "vsock_stream_has_space"
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c23d1d4f8efefb72258e9cedce29de10d057f8ca"
},
{
"id": "CVE-2025-21666-75f84a23",
"digest": {
"length": 204.0,
"function_hash": "16246550881898182238836618780166846388"
},
"signature_type": "Function",
"target": {
"file": "net/vmw_vsock/af_vsock.c",
"function": "vsock_connectible_has_data"
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c23d1d4f8efefb72258e9cedce29de10d057f8ca"
},
{
"id": "CVE-2025-21666-87ca2fbf",
"digest": {
"length": 94.0,
"function_hash": "195405411828109698325017726757026141280"
},
"signature_type": "Function",
"target": {
"file": "net/vmw_vsock/af_vsock.c",
"function": "vsock_stream_has_space"
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b52e50dd4fabd12944172bd486a4f4853b7f74dd"
},
{
"id": "CVE-2025-21666-912c25bf",
"digest": {
"length": 204.0,
"function_hash": "16246550881898182238836618780166846388"
},
"signature_type": "Function",
"target": {
"file": "net/vmw_vsock/af_vsock.c",
"function": "vsock_connectible_has_data"
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@91751e248256efc111e52e15115840c35d85abaf"
},
{
"id": "CVE-2025-21666-9153e479",
"digest": {
"length": 93.0,
"function_hash": "149776090751625789771979985530763130440"
},
"signature_type": "Function",
"target": {
"file": "net/vmw_vsock/af_vsock.c",
"function": "vsock_stream_has_data"
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b52e50dd4fabd12944172bd486a4f4853b7f74dd"
},
{
"id": "CVE-2025-21666-95f12bc6",
"digest": {
"length": 93.0,
"function_hash": "149776090751625789771979985530763130440"
},
"signature_type": "Function",
"target": {
"file": "net/vmw_vsock/af_vsock.c",
"function": "vsock_stream_has_data"
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c23d1d4f8efefb72258e9cedce29de10d057f8ca"
},
{
"id": "CVE-2025-21666-9afa4b82",
"digest": {
"length": 93.0,
"function_hash": "149776090751625789771979985530763130440"
},
"signature_type": "Function",
"target": {
"file": "net/vmw_vsock/af_vsock.c",
"function": "vsock_stream_has_data"
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bc9c49341f9728c31fe248c5fbba32d2e81a092b"
},
{
"id": "CVE-2025-21666-9fcc40e1",
"digest": {
"line_hashes": [
"108537343070897196491939357969924052287",
"219544903924714015283193098649942645194",
"220036159885546337357750522596612193410",
"135599186596389849067884391407207732660",
"220035155335039281566854062389423131484",
"54147384121960577038970272052598350994",
"231747496091312138784112211416952369489",
"283642173729706989832748046159582291521",
"191106106481670399555577623446782279262",
"269175991236061443366114574685023241359",
"148263024296509174525456907731875002582"
],
"threshold": 0.9
},
"signature_type": "Line",
"target": {
"file": "net/vmw_vsock/af_vsock.c"
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9e5fed46ccd2c34c5fa5a9c8825ce4823fdc853e"
},
{
"id": "CVE-2025-21666-a22d2e27",
"digest": {
"length": 204.0,
"function_hash": "16246550881898182238836618780166846388"
},
"signature_type": "Function",
"target": {
"file": "net/vmw_vsock/af_vsock.c",
"function": "vsock_connectible_has_data"
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bc9c49341f9728c31fe248c5fbba32d2e81a092b"
},
{
"id": "CVE-2025-21666-aaafc63d",
"digest": {
"length": 211.0,
"function_hash": "159589489249026147306817882282209351754"
},
"signature_type": "Function",
"target": {
"file": "net/vmw_vsock/af_vsock.c",
"function": "vsock_connectible_has_data"
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9e5fed46ccd2c34c5fa5a9c8825ce4823fdc853e"
},
{
"id": "CVE-2025-21666-bca20af7",
"digest": {
"length": 94.0,
"function_hash": "195405411828109698325017726757026141280"
},
"signature_type": "Function",
"target": {
"file": "net/vmw_vsock/af_vsock.c",
"function": "vsock_stream_has_space"
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bc9c49341f9728c31fe248c5fbba32d2e81a092b"
},
{
"id": "CVE-2025-21666-c01c7a66",
"digest": {
"length": 93.0,
"function_hash": "149776090751625789771979985530763130440"
},
"signature_type": "Function",
"target": {
"file": "net/vmw_vsock/af_vsock.c",
"function": "vsock_stream_has_data"
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@daeac89cdb03d30028186f5ff7dc26ec8fa843e7"
},
{
"id": "CVE-2025-21666-f64cee2d",
"digest": {
"length": 93.0,
"function_hash": "149776090751625789771979985530763130440"
},
"signature_type": "Function",
"target": {
"file": "net/vmw_vsock/af_vsock.c",
"function": "vsock_stream_has_data"
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9e5fed46ccd2c34c5fa5a9c8825ce4823fdc853e"
},
{
"id": "CVE-2025-21666-fa111239",
"digest": {
"length": 211.0,
"function_hash": "159589489249026147306817882282209351754"
},
"signature_type": "Function",
"target": {
"file": "net/vmw_vsock/af_vsock.c",
"function": "vsock_connectible_has_data"
},
"deprecated": false,
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b52e50dd4fabd12944172bd486a4f4853b7f74dd"
}
]