Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2025-21749

net: rose: lock the socket in rose_bind()

Description

In the Linux kernel, the following vulnerability has been resolved: net: rose: lock the socket in rose_bind() syzbot reported a soft lockup in rose_loopback_timer(), with a repro calling bind() from multiple threads. rose_bind() must lock the socket to avoid this issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < b8bf5c3fb778bbb1f3ff7d98ec577c969f687513affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < ed00c5f907d08a647b8bf987514ad8c6b17971a7affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < d308661a0f4e7c8e86dfc7074a55ee5894c61538affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 667f61b3498df751c8b3f0be1637e7226cbe3ed0affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < e0384efd45f615603e6869205b72040c209e69ccaffected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 970cd2ed26cdab2b0f15b6d90d7eaa36538244a5affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 4c04b0ab3a647e76d0e752b013de8e404abafc63affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < a1300691aed9ee852b0a9192e29e2bdc2411a7e6affected

Linux Linux

Default version status: affected

  • 2.6.12affected
  • 0 to < 2.6.12unaffected
  • 5.4.291 to ≤ 5.4.*unaffected
  • 5.10.235 to ≤ 5.10.*unaffected
  • 5.15.179 to ≤ 5.15.*unaffected
  • 6.1.129 to ≤ 6.1.*unaffected
  • 6.6.78 to ≤ 6.6.*unaffected
  • 6.12.14 to ≤ 6.12.*unaffected
  • 6.13.3 to ≤ 6.13.*unaffected
  • 6.14 to ≤ *unaffected

References