CVE-2025-22063

MEDIUM EPSS 13.9%
Published Apr 16, 20251y ago · Modified Jun 17, 20261w ago
5.5 CVSS 3.1
Medium
Find Similar
Published Apr 16, 2025 1y ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets When calling netlbl_conn_setattr(), addr->sa_family is used to determine the function behavior. If sk is an IPv4 socket, but the connect function is called with an IPv6 address, the function calipso_sock_setattr() is triggered. Inside this function, the following code is executed: sk_fullsock(__sk) ? inet_sk(__sk)->pinet6 : NULL; Since sk is an IPv4 socket, pinet6 is NULL, leading to a null pointer dereference. This patch fixes the issue by checking if inet6_sk(sk) returns a NULL pointer before accessing pinet6.

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
13.9% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-476 NULL Pointer Dereference Memory Safety

Affected Products 8

VendorProductVersionRange
linuxlinux_kernel*≥4.8  –  <5.4.292
linuxlinux_kernel*≥5.5  –  <5.10.236
linuxlinux_kernel*≥5.11  –  <5.15.180
linuxlinux_kernel*≥5.16  –  <6.1.134
linuxlinux_kernel*≥6.2  –  <6.6.87
linuxlinux_kernel*≥6.7  –  <6.12.23
linuxlinux_kernel*≥6.13  –  <6.13.11
linuxlinux_kernel*≥6.14  –  <6.14.2

References 11

  • git.kernel.org https://git.kernel.org/stable/c/078aabd567de3d63d37d7673f714e309d369e6e2
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/172a8a996a337206970467e871dd995ac07640b1
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/1927d0bcd5b81e80971bf6b8eba267508bd1c78b
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/1ad9166cab6a0f5c0b10344a97bdf749ae11dcbf
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/1e38f7a6cdd68377f8a4189b2fbaec14a6dd5152
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/3ba9cf69de50e8abed32b448616c313baa4c5712
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/797e5371cf55463b4530bab3fef5f27f7c6657a8
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/9fe3839588db7519030377b7dee3f165e654f6c5
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/a7e89541d05b98c79a51c0f95df020f8e82b62ed
    Patch
  • lists.debian.org https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html
  • lists.debian.org https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/078aabd567de3d63d37d7673f714e309d369e6e2
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/172a8a996a337206970467e871dd995ac07640b1
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/1927d0bcd5b81e80971bf6b8eba267508bd1c78b
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/1ad9166cab6a0f5c0b10344a97bdf749ae11dcbf
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/1e38f7a6cdd68377f8a4189b2fbaec14a6dd5152
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/3ba9cf69de50e8abed32b448616c313baa4c5712
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/797e5371cf55463b4530bab3fef5f27f7c6657a8
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/9fe3839588db7519030377b7dee3f165e654f6c5
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/a7e89541d05b98c79a51c0f95df020f8e82b62ed
    Patch