CVE-2025-71086

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-71086
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-71086.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-71086
Downstream
Related
Published
2026-01-13T15:34:49.007Z
Modified
2026-03-12T02:17:47.736035Z
Summary
net: rose: fix invalid array index in rose_kill_by_device()
Details

In the Linux kernel, the following vulnerability has been resolved:

net: rose: fix invalid array index in rosekillby_device()

rosekillby_device() collects sockets into a local array[] and then iterates over them to disconnect sockets bound to a device being brought down.

The loop mistakenly indexes array[cnt] instead of array[i]. For cnt < ARRAYSIZE(array), this reads an uninitialized entry; for cnt == ARRAYSIZE(array), it is an out-of-bounds read. Either case can lead to an invalid socket pointer dereference and also leaks references taken via sock_hold().

Fix the index to use i.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/71xxx/CVE-2025-71086.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
12e5a4719c99d7f4104e7e962393dfb8baa1c591
Fixed
819fb41ae54960f66025802400c9d3935eef4042
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
c0e527c532a07556ca44642f5873b002c44da22c
Fixed
ed2639414d43ba037f798eaf619e878309310451
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
3e0d1585799d8a991eba9678f297fd78d9f1846e
Fixed
1418c12cd3bba79dc56b57b61c99efe40f579981
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
ffced26692f83212aa09d0ece0213b23cc2f611d
Fixed
9f6185a32496834d6980b168cffcccc2d6b17280
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
64b8bc7d5f1434c636a40bdcfcd42b278d1714be
Fixed
b409ba9e1e63ccf3ab4cc061e33c1f804183543e
Fixed
92d900aac3a5721fb54f3328f1e089b44a861c38
Fixed
6595beb40fb0ec47223d3f6058ee40354694c8e4
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
bd7de4734535140fda33240c2335a07fdab6f88e
Last affected
b10265532df7bc3666bc53261b7f03f0fd14b1c9

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-71086.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.10.248
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.198
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.160
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.120
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.64
Fixed
6.18.4

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-71086.json"