Threats tagged 'ghsa-8pq8-wmv3-g27x'

CVE-2025-21749 is a medium severity vulnerability in the Linux kernel's net rose protocol implementation. It involves a concurrency issue where the socket is not properly locked in the rose_bind() function, leading to a potential soft lockup when bind() is called concurrently from multiple threads. The issue was reported by syzbot and fixed by adding socket locking in rose_bind().