CVE-2025-22063

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-22063
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-22063.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-22063
Downstream
Related
Published
2025-04-16T14:12:18.222Z
Modified
2026-03-11T07:48:22.972669Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets
Details

In the Linux kernel, the following vulnerability has been resolved:

netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets

When calling netlblconnsetattr(), addr->safamily is used to determine the function behavior. If sk is an IPv4 socket, but the connect function is called with an IPv6 address, the function calipsosock_setattr() is triggered. Inside this function, the following code is executed:

sk_fullsock(__sk) ? inet_sk(__sk)->pinet6 : NULL;

Since sk is an IPv4 socket, pinet6 is NULL, leading to a null pointer dereference.

This patch fixes the issue by checking if inet6_sk(sk) returns a NULL pointer before accessing pinet6.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/22xxx/CVE-2025-22063.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
ceba1832b1b2da0149c51de62a847c00bca1677a
Fixed
1ad9166cab6a0f5c0b10344a97bdf749ae11dcbf
Fixed
1e38f7a6cdd68377f8a4189b2fbaec14a6dd5152
Fixed
a7e89541d05b98c79a51c0f95df020f8e82b62ed
Fixed
797e5371cf55463b4530bab3fef5f27f7c6657a8
Fixed
1927d0bcd5b81e80971bf6b8eba267508bd1c78b
Fixed
3ba9cf69de50e8abed32b448616c313baa4c5712
Fixed
9fe3839588db7519030377b7dee3f165e654f6c5
Fixed
172a8a996a337206970467e871dd995ac07640b1
Fixed
078aabd567de3d63d37d7673f714e309d369e6e2

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-22063.json"