p PatchFirst

CVE-2025-0665

CVE-2025-0665 · eventfd double close

This page contains facts from public vulnerability sources. Check the original advisory before updating.

libcurl would wrongly close the same eventfd file descriptor twice when taking down a connection channel after having completed a threaded name resolve.

CVSS 7.0 · High · EPSS 1.3% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • curl

    Versions
    • ≥ 8.11.1, ≤ 8.11.1: Affected (semver)

    No fix published

  • curl Debian:13

    Affected ranges
    • ECOSYSTEM: < 8.12.0+git20250209.89ed161+ds-1

    Update to 8.12.0+git20250209.89ed161+ds-1

  • curl Debian:14

    Affected ranges
    • ECOSYSTEM: < 8.12.0+git20250209.89ed161+ds-1

    Update to 8.12.0+git20250209.89ed161+ds-1

Original sources

Check your server →