NetSight
IP …
high7.8

CVE-2025-71086

In the Linux kernel, the following vulnerability has been resolved: net: rose: fix invalid array index in rose_kill_by_device() rose_kill_by_device() collects …

Impact

In the Linux kernel, the following vulnerability has been resolved: net: rose: fix invalid array index in rose_kill_by_device() rose_kill_by_device() collects sockets into a local array[] and then iterates over them to disconnect sockets bound to a device being brought down. The loop mistakenly indexes array[cnt] instead of array[i]. For cnt < ARRAY_SIZE(array), this reads an uninitialized entry; for cnt == ARRAY_SIZE(array), it is an out-of-bounds read. Either case can lead to an invalid socket pointer dereference and also leaks references taken via sock_hold(). Fix the index to use i.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.19.304 before 4.20
from 5.4.266 before 5.5
from 5.10.206 before 5.10.248
from 5.15.146 before 5.15.198
from 6.1.70 before 6.1.160
from 6.6.9 before 6.6.120

Weakness classification

CWE-129

References