CVE-2025-21711: net/rose: prevent integer overflows in rose_setsockopt()
In the Linux kernel, the following vulnerability has been resolved:
net/rose: prevent integer overflows in rosesetsockopt()
In case of possible unpredictably large arguments passed to rosesetsockopt() and multiplied by extra values on top of that, integer overflows may occur.
Do the safest minimum and fix these issues by checking the contents of 'opt' and returning -EINVAL if they are too large. Also, switch to unsigned int and remove useless check for negative 'opt' in ROSEIDLE case.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.78.1-3 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 5.15.179.1-1 - Compensating control
Apply the Linux kernel fix for net/rose by updating the kernel so rose_setsockopt() prevents integer overflows (e.g., by checking the size/contents of 'opt' and returning -EINVAL when they are too large) rather than allowing unpredictably large arguments in the ROSE_IDLE case.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-21711?
CVE-2025-21711 has a moderate severity level due to potential integer overflows in the Linux kernel's rose_setsockopt() function.
How do I fix CVE-2025-21711?
To fix CVE-2025-21711, users should update their Linux kernel to the latest available version that includes the security patch.
What are the consequences of CVE-2025-21711?
Exploiting CVE-2025-21711 can lead to system instability or crashes due to integer overflow vulnerabilities.
Which versions of the Linux kernel are affected by CVE-2025-21711?
CVE-2025-21711 affects multiple versions of the Linux kernel, specifically from 2.6.12 to 6.1.129, 6.2 to 6.6.76, 6.7 to 6.12.13, and 6.13 to 6.13.2.
What components of the Linux kernel are impacted by CVE-2025-21711?
The CVE-2025-21711 vulnerability specifically impacts the net/rose component of the Linux kernel.