In the Linux kernel, the following vulnerability has been resolved:
net: rose: convert 'use' field to refcount_t
The 'use' field in struct rose_neigh is used as a reference counter but lacks atomicity. This can lead to race conditions where a rose_neigh structure is freed while still being referenced by other code paths.
For example, when rose_neigh->use becomes zero during an ioctl operation via rose_rt_ioctl(), the structure may be removed while its timer is still active, potentially causing use-after-free issues.
This patch changes the type of 'use' from unsigned short to refcount_t and updates all code paths to use rose_neigh_hold() and rose_neigh_put() which operate reference counts atomically.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Sep 25, 2025 | Sep 25, 2025 |
| Suse | — | Upgrade kernel-azure-develUpgrade kernel-rtUpgrade dtb-apmUpgrade cluster-md-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade dtb-amlogicUpgrade kernel-default-extraUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade dtb-armUpgrade kernel-syms-rtUpgrade kernel-azure-vdsoUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-develUpgrade kernel-rt-vdsoUpgrade kernel-sourceUpgrade dlm-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-syms-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-64kbUpgrade kernel-kvmsmallUpgrade kernel-zfcpdumpUpgrade kernel-source-azureUpgrade dtb-rockchipUpgrade kselftests-kmp-64kbUpgrade dtb-qcomUpgrade kernel-rt-extraUpgrade gfs2-kmp-rtUpgrade kernel-rt-optionalUpgrade dtb-lgUpgrade kernel-obs-qaUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-rtUpgrade ocfs2-kmp-rtUpgrade kernel-macrosUpgrade kselftests-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-default-vdsoUpgrade gfs2-kmp-64kbUpgrade dtb-exynosUpgrade kernel-azure-optionalUpgrade dtb-alteraUpgrade dtb-marvellUpgrade kernel-develUpgrade dtb-amdUpgrade kernel-debugUpgrade ocfs2-kmp-defaultUpgrade dtb-freescaleUpgrade kselftests-kmp-defaultUpgrade dtb-caviumUpgrade kernel-default-livepatch-develUpgrade kernel-default-baseUpgrade dtb-nvidiaUpgrade dtb-broadcomUpgrade kernel-azure-extraUpgrade dtb-mediatekUpgrade dtb-appleUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-rtUpgrade kernel-docsUpgrade kernel-default-develUpgrade dtb-hisiliconUpgrade dtb-renesasUpgrade kernel-azureUpgrade kernel-rt_debug-develUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-devel-rtUpgrade kernel-default-optionalUpgrade kernel-64kb-extraUpgrade dtb-sprdUpgrade kernel-64kb-optionalUpgrade kernel-default-livepatchUpgrade kernel-rt-livepatchUpgrade kernel-docs-htmlUpgrade kernel-defaultUpgrade ocfs2-kmp-azureUpgrade dtb-socionextUpgrade kernel-debug-develUpgrade dtb-allwinnerUpgrade reiserfs-kmp-defaultUpgrade dtb-amazonUpgrade kernel-64kb-develUpgrade dlm-kmp-defaultUpgrade kernel-symsUpgrade kernel-rt_debugUpgrade kernel-rt-develUpgrade kernel-debug-vdsoUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade dtb-xilinxUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-64kb | Dec 5, 2025 | Oct 15, 2025 |
| Ubuntu | — | Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1049-ibmUpgrade linux-image-6.8.0-1049-nvidiaUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1035-gkeopUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.1-1045-realtimeUpgrade linux-image-6.8.0-1048-gkeUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-nvidiaUpgrade linux-image-oem-22.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1052-gcp-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1050-aws-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-genericUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-6.8.0-106-lowlatencyUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-106-genericUpgrade linux-image-6.8.0-1052-gcp-fipsUpgrade linux-image-aws-fipsUpgrade linux-image-fipsUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-gke-64kUpgrade linux-image-lowlatencyUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gcp-6.8Upgrade linux-image-generic-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1050-raspiUpgrade linux-image-xilinxUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1052-azure-fipsUpgrade linux-image-6.8.0-1049-nvidia-lowlatency-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-kvmUpgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-106-fipsUpgrade linux-image-6.8.0-106-generic-64kUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1049-nvidia-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-gcpUpgrade linux-image-oem-22.04bUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1048-gke-64kUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-106-lowlatency-64kUpgrade linux-image-gke-64k-6.8Upgrade linux-image-virtualUpgrade linux-image-oracle-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-awsUpgrade linux-image-intel-iotgUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1047-oracle-64kUpgrade linux-image-6.8.0-2040-raspi-realtimeUpgrade linux-image-xilinx-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-azureUpgrade linux-image-ibm-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1050-aws-fipsUpgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1052-gcpUpgrade linux-image-6.8.0-1050-awsUpgrade linux-image-fips-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1047-oracleUpgrade linux-image-realtime-6.8.1Upgrade linux-image-realtimeUpgrade linux-image-raspiUpgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gke-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1049-nvidia-lowlatency | Mar 17, 2026 | Sep 16, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 7, 2025 | Sep 16, 2025 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub