ThreatCluster

Multiple CVEs Affecting Linux Kernel's net/rose Module

First seen 18 Feb 2026, 16:24 UTC Api.Msrc.Microsoft 43

Article Content

Browse articles
ThreatCluster

Two vulnerabilities have been reported in the Linux kernel's net/rose module. CVE-2023-51782, published on December 25, 2023, involves a use-after-free issue due to a race condition in rose_accept. CVE-2025-21711, set to be published on February 27, 2025, addresses integer overflows in rose_setsockopt().

Timeline

2023-12-25
CVE-2023-51782 published
2025-02-27
CVE-2025-21711 published
2026-02-18
Articles published regarding both CVEs