CVE-2025-38461

MEDIUM

Linux Kernel 5.5-6.14 vsock Transport Time-of-check Time-of-use Race Condition

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: vsock: Fix transport_* TOCTOU Transport assignment may race with module unload. Protect new_transport from becoming a stale pointer. This also takes care of an insecure call in vsock_use_local_transport(); add a lockdep assert. BUG: unable to handle page fault for address: fffffbfff8056000 Oops: Oops: 0000 [#1] SMP KASAN RIP: 0010:vsock_assign_transport+0x366/0x600 Call Trace: vsock_connect+0x59c/0xc40 __sys_connect+0xe8/0x100 __x64_sys_connect+0x6e/0xc0 do_syscall_64+0x92/0x1c0 entry_SYSCALL_64_after_hwframe+0x4b/0x53

References (9)

Core 9

Scores

CVSS v3 4.7
EPSS 0.0011
EPSS Percentile 1.4%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-367
Status published
Products (25)
debian/debian_linux 11.0
linux/Kernel 5.11.0 - 5.15.189linux
linux/Kernel 5.16.0 - 6.1.146linux
linux/Kernel 5.5.0 - 5.10.240linux
linux/Kernel 6.13.0 - 6.15.7linux
linux/Kernel 6.2.0 - 6.6.99linux
linux/Kernel 6.7.0 - 6.12.39linux
Linux/Linux < 5.5
Linux/Linux 5.10.240 - 5.10.*
Linux/Linux 5.15.189 - 5.15.*
... and 15 more
Published Jul 25, 2025
Tracked Since Feb 18, 2026