In the Linux kernel, the following vulnerability has been resolved:
net: rose: convert 'use' field to refcount_t
The 'use' field in struct rose_neigh is used as a reference counter but lacks atomicity. This can lead to race conditions where a rose_neigh structure is freed while still being referenced by other code paths.
For example, when rose_neigh->use becomes zero during an ioctl operation via rose_rt_ioctl(), the structure may be removed while its timer is still active, potentially causing use-after-free issues.
This patch changes the type of 'use' from unsigned short to refcount_t and updates all code paths to use rose_neigh_hold() and rose_neigh_put() which operate reference counts atomically.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Sep 25, 2025 | Sep 25, 2025 |
| Suse | — | Upgrade kernel-rt-vdsoUpgrade kernel-sourceUpgrade kselftests-kmp-64kbUpgrade kernel-source-azureUpgrade cluster-md-kmp-defaultUpgrade dtb-rockchipUpgrade kernel-rt_debug-vdsoUpgrade cluster-md-kmp-azureUpgrade dtb-amlogicUpgrade dtb-armUpgrade kernel-64kbUpgrade kernel-rt-optionalUpgrade kernel-rt-extraUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-default-base-rebuildUpgrade kernel-default-extraUpgrade kernel-obs-buildUpgrade dlm-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-obs-qaUpgrade reiserfs-kmp-64kbUpgrade dlm-kmp-azureUpgrade kernel-zfcpdumpUpgrade dtb-qcomUpgrade dtb-apmUpgrade gfs2-kmp-rtUpgrade kernel-azure-vdsoUpgrade kernel-default-vdsoUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade kselftests-kmp-azureUpgrade kernel-rtUpgrade kernel-azure-develUpgrade reiserfs-kmp-azureUpgrade dtb-lgUpgrade gfs2-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-syms-rtUpgrade dtb-exynosUpgrade kernel-azure-optionalUpgrade kernel-source-rtUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-azureUpgrade dtb-mediatekUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-extraUpgrade dtb-sprdUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-extraUpgrade dtb-amazonUpgrade ocfs2-kmp-64kbUpgrade dtb-appleUpgrade reiserfs-kmp-rtUpgrade dtb-allwinnerUpgrade reiserfs-kmp-defaultUpgrade kernel-defaultUpgrade kernel-docs-htmlUpgrade kernel-default-livepatchUpgrade dtb-renesasUpgrade kernel-rt-livepatchUpgrade dtb-caviumUpgrade kernel-symsUpgrade kernel-rt_debugUpgrade kernel-rt-develUpgrade kernel-debug-vdsoUpgrade dtb-xilinxUpgrade dlm-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-default-livepatch-develUpgrade dtb-marvellUpgrade kernel-default-baseUpgrade dtb-nvidiaUpgrade ocfs2-kmp-azureUpgrade kernel-debug-develUpgrade kernel-azureUpgrade dtb-hisiliconUpgrade kernel-64kb-optionalUpgrade dtb-socionextUpgrade dtb-broadcomUpgrade dtb-amdUpgrade kernel-debugUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-develUpgrade kernel-devel-rtUpgrade kernel-develUpgrade kernel-default-optionalUpgrade kselftests-kmp-rtUpgrade kernel-docsUpgrade kernel-default-develUpgrade dtb-alteraUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade dtb-freescale | Dec 5, 2025 | Oct 15, 2025 |
| Ubuntu | — | Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1050-aws-fipsUpgrade linux-image-6.8.0-106-lowlatency-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-raspiUpgrade linux-image-realtimeUpgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-1047-oracleUpgrade linux-image-azure-fips-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1050-awsUpgrade linux-image-oem-22.04cUpgrade linux-image-azure-lts-24.04Upgrade linux-image-aws-6.8Upgrade linux-image-kvmUpgrade linux-image-ibm-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1052-gcpUpgrade linux-image-6.8.0-1048-gke-64kUpgrade linux-image-gcpUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-azure-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-generic-64k-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-106-fipsUpgrade linux-image-aws-lts-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-106-generic-64kUpgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-1049-nvidia-64kUpgrade linux-image-awsUpgrade linux-image-gke-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-azureUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1049-nvidia-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-raspi-6.8Upgrade linux-image-6.8.0-1047-oracle-64kUpgrade linux-image-6.8.0-1052-azure-fipsUpgrade linux-image-xilinxUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-2040-raspi-realtimeUpgrade linux-image-aws-fips-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-xilinx-6.8Upgrade linux-image-6.8.0-1049-nvidia-lowlatencyUpgrade linux-image-6.8.0-106-genericUpgrade linux-image-6.8.0-1050-aws-64kUpgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1049-ibmUpgrade linux-image-6.8.0-1048-gkeUpgrade linux-image-6.8.0-1035-gkeopUpgrade linux-image-virtual-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-genericUpgrade linux-image-aws-fipsUpgrade linux-image-fipsUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1052-gcp-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1052-gcp-fipsUpgrade linux-image-6.8.0-1050-raspiUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gke-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-106-lowlatencyUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.1-1045-realtimeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-gcp-fipsUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1049-nvidiaUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-gkeUpgrade linux-image-nvidia-6.8 | Mar 17, 2026 | Sep 16, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 7, 2025 | Sep 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub