Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2025-21711

net/rose: prevent integer overflows in rose_setsockopt()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: net/rose: prevent integer overflows in rose_setsockopt() In case of possible unpredictably large arguments passed to rose_setsockopt() and multiplied by extra values on top of that, integer overflows may occur. Do the safest minimum and fix these issues by checking the contents of 'opt' and returning -EINVAL if they are too large. Also, switch to unsigned int and remove useless check for negative 'opt' in ROSE_IDLE case.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 4bdd449977e2364a53d0b2a5427e71beb1cd702daffected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < b8583b54455cbec2fc038fa32b6700890b369815affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 9bdee49ad6bbd26ab5e13cc6731e54fb1b6c1dcaaffected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 352daa50946c3bbb662432e8daf54d6760796589affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < d08f4074f9c69f7e95502587eb1b258a965ba7f0affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < e5338930a29d0ab2a5af402f5f664aeba0d1a676affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < d640627663bfe7d8963c7615316d7d4ef60f3b0baffected

Linux Linux

Default version status: affected

  • 2.6.12affected
  • 0 to < 2.6.12unaffected
  • 5.10.235 to ≤ 5.10.*unaffected
  • 5.15.179 to ≤ 5.15.*unaffected
  • 6.1.129 to ≤ 6.1.*unaffected
  • 6.6.76 to ≤ 6.6.*unaffected
  • 6.12.13 to ≤ 6.12.*unaffected
  • 6.13.2 to ≤ 6.13.*unaffected
  • 6.14 to ≤ *unaffected

References