CVE-2025-21749

Summary

CVE-2025-21749 is a vulnerability affecting the Linux kernel that was recently addressed. The issue was identified in the "net: rose:" subsystem, specifically in the function "rose_bind()." Multithreaded applications that call "bind()" were found to cause a soft lockup in "rose_loopback_timer()." This vulnerability occurred due to the failure of "rose_bind()" to properly lock the socket, leading to potential concurrency issues. The resolution to this issue involves implementing the necessary socket locking mechanism in "rose_bind()" to prevent such lockups.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.