diff --git a/supported.conf b/supported.conf
index d112981..bf4107e 100644
--- a/supported.conf
+++ b/supported.conf
@@ -4168,7 +4168,7 @@
 		net/rds/rds_tcp							# RDS over TCP
 		net/rfkill/rfkill						# RF switch subsystem support
 		net/rfkill/rfkill-gpio						# GPIO rfkill driver
--		net/rose/rose
+-		net/rose/rose							# review CVE-2022-2961/bsc#1202660 before marking supported
 -		net/rxrpc/rxrpc
 -		net/rxrpc/rxperf
 		net/sched/act_bpf						# traffic control: BPF based action (bsc#1034907)