Linux Kernel Use-After-Free Vulnerability in Rose Protocol Implementation

CVE-2025-38377

What is CVE-2025-38377?

A use-after-free vulnerability exists within the Linux kernel's rose protocol implementation. Specifically, flaws in the 'rose_rt_device_down()' function can lead to unintentional access to freed memory regions. Two critical issues have been identified: the loop bounds are altered during execution, leading to skipped entries in the neighbour array, and the incrementing of the loop index while modifying the array shifts unchecked elements, leaving them dangling. This mishap can cause software to erroneously access freed pointer references, potentially leading to unpredictable behavior and security risks. A fix ensures iterating backward through the array with a consistent loop bound, addressing the issue comprehensively.

References