CVE-2025-22063

netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets

Medium · published April 16, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
21.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets

When calling netlbl_conn_setattr(), addr->sa_family is used

to determine the function behavior. If sk is an IPv4 socket,

but the connect function is called with an IPv6 address,

the function calipso_sock_setattr() is triggered.

Inside this function, the following code is executed:

sk_fullsock(__sk) ? inet_sk(__sk)->pinet6 : NULL;

Since sk is an IPv4 socket, pinet6 is NULL, leading to a

null pointer dereference.

This patch fixes the issue by checking if inet6_sk(sk)

returns a NULL pointer before accessing pinet6.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00298 · 21.3th percentile
Published
2025-04-16T14:12Z
EPSS history
Timeline
  • 16 APR 14:12Z
    netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets
    cvelistv5