CVE-2025-38461

Advisory lineage Upstream: 0 Downstream: 66
Analyzed
Published: 25 Jul 2025, 15:27
Last modified:11 May 2026, 21:28

Vulnerability Summary

Overall Risk (default)
low
19/100
CVSS Score
4.7 MEDIUM
v3.1 (nvd)
EPSS Score
0.05% LOW
0% probability +0.04%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

25 Jul 2025, 15:27
Published
Vulnerability first disclosed
11 May 2026, 21:28
Last Modified
Vulnerability information updated

Description

In the Linux kernel, the following vulnerability has been resolved: vsock: Fix transport_* TOCTOU Transport assignment may race with module unload. Protect new_transport from becoming a stale pointer. This also takes care of an insecure call in vsock_use_local_transport(); add a lockdep assert. BUG: unable to handle page fault for address: fffffbfff8056000 Oops: Oops: 0000 [#1] SMP KASAN RIP: 0010:vsock_assign_transport+0x366/0x600 Call Trace: vsock_connect+0x59c/0xc40 __sys_connect+0xe8/0x100 __x64_sys_connect+0x6e/0xc0 do_syscall_64+0x92/0x1c0 entry_SYSCALL_64_after_hwframe+0x4b/0x53

CVSS Metrics

  • v3.1•MEDIUM•Score: 4.7CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS Trends

Current EPSS score: 0.05%• Percentile: 16%

Techniques & Countermeasures

  • CWE-367•Time-of-check Time-of-use (TOCTOU) Race Condition

    The product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check.

Affected Systems

  • debian•debian_linux

    11.0

  • linux•linux

    ≥ c0cfa2d8a788fcf45df5bf4070ab2474c88d543a, < 8667e8d0eb46bc54fdae30ba2f4786407d3d88eb | ≥ c0cfa2d8a788fcf45df5bf4070ab2474c88d543a, < 36a439049b34cca0b3661276049b84a1f76cc21a | ≥ c0cfa2d8a788fcf45df5bf4070ab2474c88d543a, < 9ce53e744f18e73059d3124070e960f3aa9902bf | ≥ c0cfa2d8a788fcf45df5bf4070ab2474c88d543a, < 9d24bb6780282b0255b9929abe5e8f98007e2c6e | ≥ c0cfa2d8a788fcf45df5bf4070ab2474c88d543a, < ae2c712ba39c7007de63cb0c75b51ce1caaf1da5 | ≥ c0cfa2d8a788fcf45df5bf4070ab2474c88d543a, < 7b73bddf54777fb62d4d8c7729d0affe6df04477 | ≥ c0cfa2d8a788fcf45df5bf4070ab2474c88d543a, < 687aa0c5581b8d4aa87fd92973e4ee576b550cdf | 5.5

  • linux•linux_kernel

    ≥ 5.5, < 5.10.240 | ≥ 5.11, < 5.15.189 | ≥ 5.16, < 6.1.146 | ≥ 6.2, < 6.6.99 | ≥ 6.7, < 6.12.39 | ≥ 6.13, < 6.15.7 | 6.16:rc1 | 6.16:rc2 | 6.16:rc3 | 6.16:rc4 | 6.16:rc5

References (9)