CVE-2025-0665: Haxx Curl

High severity, CVSS 7.0. EPSS: 1.3% chance of exploitation in the next 30 days.

libcurl would wrongly close the same eventfd file descriptor twice when taking down a connection channel after having completed a threaded name resolve.

Affected products

• Haxx Curl: version 8.11.1 only
• Netapp Bootstrap OS: affected versions not specified
• Netapp h300s Firmware: affected versions not specified
• Netapp h410c Firmware: affected versions not specified
• Netapp h410s Firmware: affected versions not specified
• Netapp h500s Firmware: affected versions not specified
• Netapp h700s Firmware: affected versions not specified

Published 2025-02-05. Last modified 2026-06-17.