Non notée
CVE-2025-21711 In the Linux kernel, the following vulnerability has been resolved: net/rose: prevent integer overflows in…
Description
In the Linux kernel, the following vulnerability has been resolved: net/rose: prevent integer overflows in rose_setsockopt() In case of possible unpredictably large arguments passed to rose_setsockopt() and multiplied by extra values on top of that, integer overflows may occur. Do the safest minimum and fix these issues by checking the contents of 'opt' and returning -EINVAL if they are too large. Also, switch to unsigned int and remove useless check for negative 'opt' in ROSE_IDLE case.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Linux 6.14 | premières → < 6.14 | 6.14 |
| Linux 6.13 | premières → < 6.13.2 | 6.13.2 |
| Linux 6.12 | premières → < 6.12.13 | 6.12.13 |
| Linux 6.6 | premières → < 6.6.76 | 6.6.76 |
| Linux 6.1 | premières → < 6.1.129 | 6.1.129 |
| Linux 5.15 | premières → < 5.15.179 | 5.15.179 |
| Linux 5.10 | premières → < 5.10.235 | 5.10.235 |
| Linux | 2.6.12 | Pas de correctif indiqué |
| SIMATIC S7-1500 TM MFP - GNU/Linux subsystem | Versions non publiées |
Autres CVE de Linux
Les 18300 CVE de Linux →
CVE-2026-99284
net: skbuff: propagate shared-frag marker in skb_zerocopy()
Non notée
CVE-2026-99283
netfilter: conntrack: tcp: use UNACK timeout for non-closing RST packets
Non notée
CVE-2026-99282
net/sched: sch_teql: fix use-after-free on lower qdisc drop
Non notée
CVE-2026-99281
tun: Require CAP_NET_ADMIN to attach to an ownerless device
Non notée