CVE-2025-0665 eventfd double close
libcurl incorrectly closes an eventfd twice during connection teardown, potentially causing a denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-0665?
CVE-2025-0665 is a high-severity vulnerability in Haxx Curl, published on 5 Feb 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
libcurl would wrongly close the same eventfd file descriptor twice when taking down a connection channel after having completed a threaded name resolve.
Which versions are affected by CVE-2025-0665?
It affects 7 products.
Linux distribution packages (1)
curl openSUSE:Tumbleweed | All versions | 8.12.1-1.1 |
Products include Haxx Curl, Netapp Bootstrap Os, Netapp H300s Firmware, Netapp H410c Firmware, Netapp H410s Firmware, Netapp H500s Firmware and 1 more.
How do I fix CVE-2025-0665?
Upgrade to a fixed version.
Is CVE-2025-0665 being exploited?
There is no known exploitation of CVE-2025-0665 in the wild and no public exploit code.
Other vulnerabilities in Haxx Curl
Sources
Also known as ALPINE-CVE-2025-0665, AZL-56692, BELL-CVE-2025-0665, CLEANSTART-2026-VM75462, CURL-CVE-2025-0665, DEBIAN-CVE-2025-0665 and 4 more.