---
id: CVE-2025-21711
title: 'net/rose: prevent integer overflows in rose_setsockopt()'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  net/rose: prevent integer overflows in rose_setsockopt()

  In case of possible unpredictably large arguments passed to
  rose_setsockopt() and multiplied by extra values o…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    4bdd449977e2364a53d0b2a5427e71beb1cd702d
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    b8583b54455cbec2fc038fa32b6700890b369815
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    9bdee49ad6bbd26ab5e13cc6731e54fb1b6c1dca
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    352daa50946c3bbb662432e8daf54d6760796589
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    d08f4074f9c69f7e95502587eb1b258a965ba7f0
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    e5338930a29d0ab2a5af402f5f664aeba0d1a676
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    d640627663bfe7d8963c7615316d7d4ef60f3b0b
  - Linux 2.6.12
published: '2025-02-27'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T01:03:34.288Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2025-21711'
references:
  - url: 'https://git.kernel.org/stable/c/4bdd449977e2364a53d0b2a5427e71beb1cd702d'
  - url: 'https://git.kernel.org/stable/c/b8583b54455cbec2fc038fa32b6700890b369815'
  - url: 'https://git.kernel.org/stable/c/9bdee49ad6bbd26ab5e13cc6731e54fb1b6c1dca'
  - url: 'https://git.kernel.org/stable/c/352daa50946c3bbb662432e8daf54d6760796589'
  - url: 'https://git.kernel.org/stable/c/d08f4074f9c69f7e95502587eb1b258a965ba7f0'
  - url: 'https://git.kernel.org/stable/c/e5338930a29d0ab2a5af402f5f664aeba0d1a676'
  - url: 'https://git.kernel.org/stable/c/d640627663bfe7d8963c7615316d7d4ef60f3b0b'
tags:
  - cve.org
epss: 0.00227
epssPercentile: 0.1336
ingestedAt: '2026-10-15T04:46:37.356Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

net/rose: prevent integer overflows in rose_setsockopt()

In case of possible unpredictably large arguments passed to
rose_setsockopt() and multiplied by extra values on top of that,
integer overflows may occur.

Do the safest minimum and fix these issues by checking the
contents of 'opt' and returning -EINVAL if they are too large. Also,
switch to unsigned int and remove useless check for negative 'opt'
in ROSE_IDLE case.

## Affected

- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 4bdd449977e2364a53d0b2a5427e71beb1cd702d`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < b8583b54455cbec2fc038fa32b6700890b369815`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 9bdee49ad6bbd26ab5e13cc6731e54fb1b6c1dca`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 352daa50946c3bbb662432e8daf54d6760796589`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < d08f4074f9c69f7e95502587eb1b258a965ba7f0`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < e5338930a29d0ab2a5af402f5f664aeba0d1a676`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < d640627663bfe7d8963c7615316d7d4ef60f3b0b`
- `Linux 2.6.12`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.