{"id":"CURL-CVE-2025-0665","summary":"eventfd double close","details":"libcurl would wrongly close the same eventfd file descriptor twice when taking\ndown a connection channel after having completed a threaded name resolve.","aliases":["CVE-2025-0665"],"modified":"2026-05-27T02:29:21.198394Z","published":"2025-02-05T08:00:00Z","database_specific":{"last_affected":"8.11.1","package":"curl","issue":"https://hackerone.com/reports/2954286","affects":"both","award":{"currency":"USD","amount":"505"},"URL":"https://curl.se/docs/CVE-2025-0665.json","CWE":{"desc":"Multiple Releases of Same Resource or Handle","id":"CWE-1341"},"severity":"Low","www":"https://curl.se/docs/CVE-2025-0665.html"},"affected":[{"ranges":[{"type":"SEMVER","events":[{"introduced":"8.11.1"},{"fixed":"8.12.0"}]},{"type":"GIT","repo":"https://github.com/curl/curl.git","events":[{"introduced":"92124838c6b7e09e3f35ff84e1eb63cf0105c9b5"},{"fixed":"ff5091aa9f73802e894b1cbdf24ab84e103200e2"}]}],"versions":["8.11.1","curl-8_11_1"],"database_specific":{"vanir_signatures_modified":"2026-05-27T02:29:21Z","source":"https://curl.se/docs/CURL-CVE-2025-0665.json","vanir_signatures":[{"signature_type":"Function","deprecated":false,"id":"CURL-CVE-2025-0665-8a1d0519","digest":{"length":386,"function_hash":"330746453560057327595202474110269703424"},"source":"https://github.com/curl/curl.git/commit/ff5091aa9f73802e894b1cbdf24ab84e103200e2","target":{"file":"lib/asyn-thread.c","function":"destroy_thread_sync_data"},"signature_version":"v1"},{"signature_type":"Line","deprecated":false,"id":"CURL-CVE-2025-0665-f8e1c049","digest":{"line_hashes":["332922935470749792573867805379503604001","270402022324605171628271509787427407970","325748360549732944034300747162180532004","82281272682367692068585845682578917187","198747049406871451145987131241229838375","294513380310706942675812105694619897334"],"threshold":0.9},"source":"https://github.com/curl/curl.git/commit/ff5091aa9f73802e894b1cbdf24ab84e103200e2","target":{"file":"lib/asyn-thread.c"},"signature_version":"v1"}]}}],"schema_version":"1.7.5","credits":[{"name":"Christian Heusel","type":"FINDER"},{"name":"Andy Pan","type":"REMEDIATION_DEVELOPER"}]}