Vulnerabilities > CVE-2025-21749 - Unspecified vulnerability in Linux Kernel 6.14

047910
CVSS 5.5 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
local
low complexity
linux
NVD
Published: 2025-02-27
Updated: 2025-02-27

Summary

In the Linux kernel, the following vulnerability has been resolved: net: rose: lock the socket in rose_bind() syzbot reported a soft lockup in rose_loopback_timer(), with a repro calling bind() from multiple threads. rose_bind() must lock the socket to avoid this issue.

Vulnerable Configurations

Part Description Count
OS
Linux
2

References