CVE-2025-21711
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Feb 27, 2025
Updated: Mar 13, 2025
CWE ID 190
Summary
CVE-2025-21711 is a vulnerability affecting the Linux kernel where integer overflows can occur in the net/rose: rose_setsockopt() function. This issue arises when unpredictably large arguments are passed to rose_setsockopt() and multiplied by additional values. To mitigate this vulnerability, developers should check the contents of the 'opt' argument and return -EINVAL if its size is too large. Additionally, it is recommended to switch to unsigned int data type and eliminate the unnecessary check for negative 'opt' values in the ROSE_IDLE case.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.