In the Linux kernel, the following vulnerability has been resolved:
can: bcm: add missing rcu read protection for procfs content
When the procfs content is generated for a bcm_op which is in the process to be removed the procfs output might show unreliable data (UAF).
As the removal of bcmop's is already implemented with rcu handling this patch adds the missing rcuread_lock() and makes sure the list entries are properly removed under rcu protection.
[
{
"id": "CVE-2025-38003-1b60cd1d",
"signature_version": "v1",
"digest": {
"line_hashes": [
"95094850805506707386324457188953790097",
"209348539777508523385532892207652659261",
"61555264993744467470594485032754252979",
"297405664622252423912861965236290260486",
"67563552566888309085657630168203539299",
"27478975766759606616212779817281863073",
"102726888001113896641573027695919449516",
"25413160742207920556949025931219884663",
"13665608197329077867374483219098165946",
"284968728569814436671196288202328141720",
"247286826847872670988649078003992922261",
"243484342043816250081782462999818378823",
"3892691957676677732022673467751022217",
"331472548235096028554888426444892354866",
"96316116573830108703997591705628466657",
"243484342043816250081782462999818378823",
"221461199148046021825133876811477283828",
"146022866019534259653751064036605385138",
"142172218568397344476373816491998331296",
"299483935455501904150501251647170475916"
],
"threshold": 0.9
},
"target": {
"file": "net/can/bcm.c"
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6d7d458c41b98a5c1670cbd36f2923c37de51cf5"
},
{
"id": "CVE-2025-38003-22558f80",
"signature_version": "v1",
"digest": {
"line_hashes": [
"95094850805506707386324457188953790097",
"209348539777508523385532892207652659261",
"61555264993744467470594485032754252979",
"297405664622252423912861965236290260486",
"67563552566888309085657630168203539299",
"27478975766759606616212779817281863073",
"102726888001113896641573027695919449516",
"25413160742207920556949025931219884663",
"13665608197329077867374483219098165946",
"284968728569814436671196288202328141720",
"247286826847872670988649078003992922261",
"243484342043816250081782462999818378823",
"3892691957676677732022673467751022217",
"331472548235096028554888426444892354866",
"96316116573830108703997591705628466657",
"243484342043816250081782462999818378823",
"221461199148046021825133876811477283828",
"146022866019534259653751064036605385138",
"142172218568397344476373816491998331296",
"299483935455501904150501251647170475916"
],
"threshold": 0.9
},
"target": {
"file": "net/can/bcm.c"
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@659701c0b954ccdb4a916a4ad59bbc16e726d42c"
},
{
"id": "CVE-2025-38003-4125f921",
"signature_version": "v1",
"digest": {
"length": 2001.0,
"function_hash": "189498516846515411885377480235905123002"
},
"target": {
"file": "net/can/bcm.c",
"function": "bcm_proc_show"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0622846db728a5332b917c797c733e202c4620ae"
},
{
"id": "CVE-2025-38003-55b596fb",
"signature_version": "v1",
"digest": {
"line_hashes": [
"95094850805506707386324457188953790097",
"209348539777508523385532892207652659261",
"61555264993744467470594485032754252979",
"297405664622252423912861965236290260486",
"67563552566888309085657630168203539299",
"27478975766759606616212779817281863073",
"102726888001113896641573027695919449516",
"25413160742207920556949025931219884663",
"13665608197329077867374483219098165946",
"284968728569814436671196288202328141720",
"247286826847872670988649078003992922261",
"243484342043816250081782462999818378823",
"3892691957676677732022673467751022217",
"331472548235096028554888426444892354866",
"96316116573830108703997591705628466657",
"243484342043816250081782462999818378823",
"221461199148046021825133876811477283828",
"146022866019534259653751064036605385138",
"142172218568397344476373816491998331296",
"299483935455501904150501251647170475916"
],
"threshold": 0.9
},
"target": {
"file": "net/can/bcm.c"
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0622846db728a5332b917c797c733e202c4620ae"
},
{
"id": "CVE-2025-38003-5fb05d12",
"signature_version": "v1",
"digest": {
"line_hashes": [
"95094850805506707386324457188953790097",
"209348539777508523385532892207652659261",
"61555264993744467470594485032754252979",
"297405664622252423912861965236290260486",
"67563552566888309085657630168203539299",
"27478975766759606616212779817281863073",
"102726888001113896641573027695919449516",
"25413160742207920556949025931219884663",
"13665608197329077867374483219098165946",
"284968728569814436671196288202328141720",
"247286826847872670988649078003992922261",
"243484342043816250081782462999818378823",
"3892691957676677732022673467751022217",
"331472548235096028554888426444892354866",
"96316116573830108703997591705628466657",
"243484342043816250081782462999818378823",
"221461199148046021825133876811477283828",
"146022866019534259653751064036605385138",
"142172218568397344476373816491998331296",
"299483935455501904150501251647170475916"
],
"threshold": 0.9
},
"target": {
"file": "net/can/bcm.c"
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7c9db92d5f0eadca30884af75c53d601edc512ee"
},
{
"id": "CVE-2025-38003-6a9f29d5",
"signature_version": "v1",
"digest": {
"length": 2001.0,
"function_hash": "189498516846515411885377480235905123002"
},
"target": {
"file": "net/can/bcm.c",
"function": "bcm_proc_show"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6d7d458c41b98a5c1670cbd36f2923c37de51cf5"
},
{
"id": "CVE-2025-38003-744cb11f",
"signature_version": "v1",
"digest": {
"length": 2001.0,
"function_hash": "189498516846515411885377480235905123002"
},
"target": {
"file": "net/can/bcm.c",
"function": "bcm_proc_show"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@659701c0b954ccdb4a916a4ad59bbc16e726d42c"
},
{
"id": "CVE-2025-38003-906c70c9",
"signature_version": "v1",
"digest": {
"length": 2001.0,
"function_hash": "189498516846515411885377480235905123002"
},
"target": {
"file": "net/can/bcm.c",
"function": "bcm_proc_show"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@19f553a1ddf260da6570ed8f8d91a8c87f49b63a"
},
{
"id": "CVE-2025-38003-b7a9a617",
"signature_version": "v1",
"digest": {
"line_hashes": [
"95094850805506707386324457188953790097",
"209348539777508523385532892207652659261",
"61555264993744467470594485032754252979",
"297405664622252423912861965236290260486",
"67563552566888309085657630168203539299",
"27478975766759606616212779817281863073",
"102726888001113896641573027695919449516",
"25413160742207920556949025931219884663",
"13665608197329077867374483219098165946",
"284968728569814436671196288202328141720",
"247286826847872670988649078003992922261",
"243484342043816250081782462999818378823",
"3892691957676677732022673467751022217",
"331472548235096028554888426444892354866",
"96316116573830108703997591705628466657",
"243484342043816250081782462999818378823",
"221461199148046021825133876811477283828",
"146022866019534259653751064036605385138",
"142172218568397344476373816491998331296",
"299483935455501904150501251647170475916"
],
"threshold": 0.9
},
"target": {
"file": "net/can/bcm.c"
},
"deprecated": false,
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@19f553a1ddf260da6570ed8f8d91a8c87f49b63a"
},
{
"id": "CVE-2025-38003-e6e9cdcc",
"signature_version": "v1",
"digest": {
"length": 2001.0,
"function_hash": "189498516846515411885377480235905123002"
},
"target": {
"file": "net/can/bcm.c",
"function": "bcm_proc_show"
},
"deprecated": false,
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7c9db92d5f0eadca30884af75c53d601edc512ee"
}
]