CVE-2025-21711

Summary

In the Linux kernel, the following vulnerability has been resolved:

net/rose: prevent integer overflows in rose_setsockopt()

In case of possible unpredictably large arguments passed to rose_setsockopt() and multiplied by extra values on top of that, integer overflows may occur.

Do the safest minimum and fix these issues by checking the contents of 'opt' and returning -EINVAL if they are too large. Also, switch to unsigned int and remove useless check for negative 'opt' in ROSE_IDLE case.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 4bdd449977e2364a53d0b2a5427e71beb1cd702daffected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < b8583b54455cbec2fc038fa32b6700890b369815affected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 9bdee49ad6bbd26ab5e13cc6731e54fb1b6c1dcaaffected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 352daa50946c3bbb662432e8daf54d6760796589affected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < d08f4074f9c69f7e95502587eb1b258a965ba7f0affected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < e5338930a29d0ab2a5af402f5f664aeba0d1a676affected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < d640627663bfe7d8963c7615316d7d4ef60f3b0baffected
LinuxLinux2.6.12affected
LinuxLinux0 < 2.6.12unaffected
LinuxLinux5.10.235 <= 5.10.*unaffected
LinuxLinux5.15.179 <= 5.15.*unaffected
LinuxLinux6.1.129 <= 6.1.*unaffected
LinuxLinux6.6.76 <= 6.6.*unaffected
LinuxLinux6.12.13 <= 6.12.*unaffected
LinuxLinux6.13.2 <= 6.13.*unaffected
LinuxLinux6.14 <= *unaffected

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

Additional References

References