Volerion logoVolerion
Volerion logoVolerion

Linux Kernel Rose Timer Use-After-Free Vulnerability

Vulnerability

A use-after-free vulnerability has been identified in the Linux kernel's handling of Rose timers. This issue arises because the timers only acquire the socket spinlock without verifying if the socket is owned by a user thread. The vulnerability can lead to a slab-use-after-free condition, allowing for potential memory corruption.

Impact

Exploitation of this vulnerability causes a use-after-free condition in the Rose timer management, leading to memory corruption.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
5.0
remediation
0.0
relevance
0.0
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.