CVE-2025-21749

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-21749
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-21749.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-21749
Downstream
Related
Published
2025-02-27T02:12:20.305Z
Modified
2026-03-20T12:41:09.110993Z
Summary
net: rose: lock the socket in rose_bind()
Details

In the Linux kernel, the following vulnerability has been resolved:

net: rose: lock the socket in rose_bind()

syzbot reported a soft lockup in roseloopbacktimer(), with a repro calling bind() from multiple threads.

rose_bind() must lock the socket to avoid this issue.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/21xxx/CVE-2025-21749.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Fixed
b8bf5c3fb778bbb1f3ff7d98ec577c969f687513
Fixed
ed00c5f907d08a647b8bf987514ad8c6b17971a7
Fixed
d308661a0f4e7c8e86dfc7074a55ee5894c61538
Fixed
667f61b3498df751c8b3f0be1637e7226cbe3ed0
Fixed
e0384efd45f615603e6869205b72040c209e69cc
Fixed
970cd2ed26cdab2b0f15b6d90d7eaa36538244a5
Fixed
4c04b0ab3a647e76d0e752b013de8e404abafc63
Fixed
a1300691aed9ee852b0a9192e29e2bdc2411a7e6

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-21749.json"