CVE-2025-21711 net/rose: prevent integer overflows in rose_setsockopt()

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple CVEs Affecting Linux Kernel's net/rose Module Two vulnerabilities have been reported in the Linux kernel's net/rose module. CVE-2023-51782, published on December 25, 2023, involves a use-after-free issue due to a race condition in rose_accept. CVE-2025-21711, set to be published on February 27, 2025, addresses integer overflows in rose_setsockopt(). 2 sources 43