CVE-2025-21711
net/rose: prevent integer overflows in rose_setsockopt()
Reported by linux · Published February 27, 2025
In the Linux kernel, the following vulnerability has been resolved: net/rose: prevent integer overflows in rose_setsockopt() In case of possible unpredictably large arguments passed to rose_setsockopt() and multiplied by extra values on top of that, integer overflows may occur. Do the safest minimum and fix these issues by checking the contents of 'opt' and returning -EINVAL if they are too large. Also, switch to unsigned int and remove useless check for negative 'opt' in ROSE_IDLE case.
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| linux_kernel | linux | 6.14, 6.13.2, 6.12.13, 6.6.76, 6.1.129, 5.15.179, 5.10.235 |
| Linux | Linux | e5338930a29d0ab2a5af402f5f664aeba0d1a676, d640627663bfe7d8963c7615316d7d4ef60f3b0b, d08f4074f9c69f7e95502587eb1b258a965ba7f0, 352daa50946c3bbb662432e8daf54d6760796589 |
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 |
| Linux | Linux | 2.6.12, 0, 5.10.235 |
| linux | linux_kernel | 2.6.12, 2.6.12, 2.6.12 |
| Linux | Linux | 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, 5.10.235, 6.1.129 |
| Siemens | SIMATIC S7-1500 TM MFP - GNU/Linux subsystem | 0 |
Timeline
- Feb 26, 2025 CVE Published
- Feb 27, 2025 EPSS Score (30 in total, the first dated here)
- Mar 15, 2025 Coalition ESS Score (10 in total, the first dated here)
- Dec 22, 2025 Security Advisory (375 in total, the first dated here)
- Dec 22, 2025 CVE Updated
- Apr 29, 2026 Distribution Patch (330 in total, the first dated here)
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln CVE-2025-21711
vulnetix vdb fixes CVE-2025-21711Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/CVE-2025-21711/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart