libcurl would wrongly close the same eventfd file descriptor twice when taking down a connection channel after having completed a threaded name resolve.
{ "CWE": { "id": "CWE-1341", "desc": "Multiple Releases of Same Resource or Handle" }, "award": { "amount": "505", "currency": "USD" }, "URL": "https://curl.se/docs/CVE-2025-0665.json", "package": "curl", "severity": "Low", "issue": "https://hackerone.com/reports/2954286", "www": "https://curl.se/docs/CVE-2025-0665.html", "last_affected": "8.11.1" }