In the Linux kernel, the following vulnerability has been resolved:
net: rose: fix timer races against user threads
Rose timers only acquire the socket spinlock, without checking if the socket is owned by one user thread.
Add a check and rearm the timers if needed.
BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x31d/0x360 net/rose/rose_timer.c:174 Read of size 2 at addr ffff88802f09b82a by task swapper/0/0
CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.13.0-rc5-syzkaller-00172-gd1bf27c4e176 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 Call Trace: <IRQ> __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120 print_address_description mm/kasan/report.c:378 [inline] print_report+0x169/0x550 mm/kasan/report.c:489 kasan_report+0x143/0x180 mm/kasan/report.c:602 rose_timer_expiry+0x31d/0x360 net/rose/rose_timer.c:174 call_timer_fn+0x187/0x650 kernel/time/timer.c:1793 expire_timers kernel/time/timer.c:1844 [inline] __run_timers kernel/time/timer.c:2418 [inline] __run_timer_base+0x66a/0x8e0 kernel/time/timer.c:2430 run_timer_base kernel/time/timer.c:2439 [inline] run_timer_softirq+0xb7/0x170 kernel/time/timer.c:2449 handle_softirqs+0x2d4/0x9b0 kernel/softirq.c:561 __do_softirq kernel/softirq.c:595 [inline] invoke_softirq kernel/softirq.c:435 [inline] __irq_exit_rcu+0xf7/0x220 kernel/softirq.c:662 irq_exit_rcu+0x9/0x30 kernel/softirq.c:678 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1049 </IRQ>
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Mar 17, 2025 | Feb 27, 2025 |
| Suse | — | Upgrade kernel-default-develUpgrade kernel-default-livepatchUpgrade kernel-rt-optionalUpgrade kernel-source-azureUpgrade kernel-default-optionalUpgrade kernel-azureUpgrade kernel-azure-optionalUpgrade kernel-obs-buildUpgrade kernel-sourceUpgrade kernel-develUpgrade kernel-64kb-extraUpgrade kernel-64kb-develUpgrade kernel-default-vdsoUpgrade reiserfs-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-64kbUpgrade kernel-64kb-optionalUpgrade kernel-default-extraUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade kernel-azure-vdsoUpgrade kernel-azure-develUpgrade kernel-obs-qaUpgrade kernel-defaultUpgrade kernel-kvmsmall-develUpgrade kernel-symsUpgrade kernel-docsUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-vdsoUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmallUpgrade kernel-azure-extra | Mar 24, 2025 | Feb 27, 2025 |
| Ubuntu | — | Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-ibmUpgrade linux-image-lowlatency-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1031-oemUpgrade linux-image-gke-6.8Upgrade linux-image-6.11.0-1014-awsUpgrade linux-image-5.4.0-216-genericUpgrade linux-image-oem-20.04cUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-5.4.0-1149-gcpUpgrade linux-image-5.4.0-1133-kvmUpgrade linux-image-ibm-classicUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1081-gkeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-azureUpgrade linux-image-5.15.0-1084-aws-fipsUpgrade linux-image-fipsUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-1037-nvidia-tegra-rtUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-aws-64kUpgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-6.11.0-1022-oemUpgrade linux-image-oem-6.8Upgrade linux-image-5.4.0-1149-gcp-fipsUpgrade linux-image-6.8.0-1029-oracleUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gcp-fipsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1031-nvidia-lowlatencyUpgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-generic-64kUpgrade linux-image-intelUpgrade linux-image-5.15.0-1089-azure-fipsUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-oem-20.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-5.15.0-1084-realtimeUpgrade linux-image-nvidia-6.8Upgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-64-genericUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-140-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1032-awsUpgrade linux-image-6.8.0-64-lowlatency-64kUpgrade linux-image-5.4.0-1151-azureUpgrade linux-image-5.4.0-1144-oracleUpgrade linux-image-oemUpgrade linux-image-6.11.0-26-genericUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.1-1025-realtimeUpgrade linux-image-5.15.0-140-lowlatency-64kUpgrade linux-image-nvidia-tegraUpgrade linux-image-azure-6.8Upgrade linux-image-genericUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1078-nvidiaUpgrade linux-image-5.15.0-1037-nvidia-tegraUpgrade linux-image-intel-iotgUpgrade linux-image-oem-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-virtual-6.8Upgrade linux-image-oem-osp1Upgrade linux-image-oem-22.04cUpgrade linux-image-6.11.0-1015-azureUpgrade linux-image-azure-lts-20.04Upgrade linux-image-6.8.0-2026-raspi-realtimeUpgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-1078-raspiUpgrade linux-image-5.4.0-216-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-gke-5.15Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-5.4.0-1146-awsUpgrade linux-image-5.15.0-1080-kvmUpgrade linux-image-5.15.0-1083-gcpUpgrade linux-image-5.15.0-1076-ibmUpgrade linux-image-5.4.0-1092-ibmUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-aws-fipsUpgrade linux-image-aws-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidiaUpgrade linux-image-oem-24.04bUpgrade linux-image-5.15.0-142-generic-lpaeUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-raspi-realtimeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1079-intel-iotgUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1034-azure-fdeUpgrade linux-image-5.4.0-1051-iotUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcp-64kUpgrade linux-image-5.15.0-140-fipsUpgrade linux-image-6.8.0-1031-nvidia-lowlatency-64kUpgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-5.15.0-142-genericUpgrade linux-image-5.15.0-140-generic-lpaeUpgrade linux-image-5.15.0-140-generic-64kUpgrade linux-image-5.15.0-1081-oracleUpgrade linux-image-5.15.0-1026-nvidia-tegra-igxUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1015-gkeopUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1083-gcp-fipsUpgrade linux-image-5.4.0-1151-azure-fipsUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-1031-nvidia-64kUpgrade linux-image-6.8.0-1033-gcpUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1029-oracle-64kUpgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-oracle-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1031-raspiUpgrade linux-image-raspi-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-kvmUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-raspi2Upgrade linux-image-nvidia-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-azure-fipsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1089-azureUpgrade linux-image-5.15.0-1050-xilinx-zynqmpUpgrade linux-image-5.4.0-1146-aws-fipsUpgrade linux-image-5.4.0-1105-bluefieldUpgrade linux-image-azure-fde-6.8Upgrade linux-image-6.8.0-1029-ibmUpgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1077-intel-iot-realtimeUpgrade linux-image-aws-lts-24.04Upgrade linux-image-virtualUpgrade linux-image-oracleUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-oem-22.04dUpgrade linux-image-realtimeUpgrade linux-image-ibm-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1034-azureUpgrade linux-image-6.8.0-1033-gcp-64kUpgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-5.15.0-140-genericUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1078-nvidia-lowlatencyUpgrade linux-image-5.15.0-1084-awsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-6.8.0-64-lowlatencyUpgrade linux-image-generic-64k-6.8Upgrade linux-image-5.15.0-142-generic-64kUpgrade linux-image-5.4.0-1120-fipsUpgrade linux-image-realtime-6.8.1Upgrade linux-image-5.4.0-216-generic-lpaeUpgrade linux-image-5.15.0-1066-gkeopUpgrade linux-image-5.15.0-1026-nvidia-tegra-igx-rtUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1031-nvidiaUpgrade linux-image-6.8.0-1028-gkeUpgrade linux-image-6.8.0-1022-azure-nvidiaUpgrade linux-image-5.4.0-1064-xilinx-zynqmpUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-gkeop-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1032-aws-64kUpgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-bluefieldUpgrade linux-image-6.8.0-64-generic-64k | May 20, 2025 | Feb 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 22, 2025 | Feb 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub