CVE-2025-38717
MEDIUMLinux Kernel 4.6-6.12.42, 6.13.0-6.15.10, 6.16.0-6.16.1 - Race Condition in kcm_unattach
Title source: llmDescription
In the Linux kernel, the following vulnerability has been resolved: net: kcm: Fix race condition in kcm_unattach() syzbot found a race condition when kcm_unattach(psock) and kcm_release(kcm) are executed at the same time. kcm_unattach() is missing a check of the flag kcm->tx_stopped before calling queue_work(). If the kcm has a reserved psock, kcm_unattach() might get executed between cancel_work_sync() and unreserve_psock() in kcm_release(), requeuing kcm->tx_work right before kcm gets freed in kcm_done(). Remove kcm->tx_stopped and replace it by the less error-prone disable_work_sync().
References (4)
Core 4
Core References
Scores
CVSS v3
4.7
EPSS
0.0010
EPSS Percentile
1.1%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-362
Status
published
Products (15)
linux/Kernel
4.6.0 - 6.12.43linux
linux/Kernel
6.13.0 - 6.15.11linux
linux/Kernel
6.16.0 - 6.16.2linux
Linux/Linux
< 4.6
Linux/Linux
4.6
Linux/Linux
6.12.43 - 6.12.*
Linux/Linux
6.15.11 - 6.15.*
Linux/Linux
6.16.2 - 6.16.*
Linux/Linux
6.17
Linux/Linux
ab7ac4eb9832e32a09f4e8042705484d2fb0aad3 - 52565a935213cd6a8662ddb8efe5b4219343a25d
... and 5 more
Published
Sep 04, 2025
Tracked Since
Feb 18, 2026