CVE-2025-38396

Export anoninodemakesecureinode() to allow KVM guestmemfd to create anonymous inodes with proper security context. This replaces the current pattern of calling allocanoninode() followed by inodeinitsecurityanon() for creating security context manually.

This change also fixes a security regression in secretmem where the SPRIVATE flag was not cleared after allocanon_inode(), causing LSM/SELinux checks to be bypassed for secretmem file descriptors.

As guestmemfd currently resides in the KVM module, we need to export this symbol for use outside the core kernel. In the future, guestmemfd might be moved to core-mm, at which point the symbols no longer would have to be exported. When/if that happens is still unclear.

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

2bfe15c5261212130f1a71f32a300bcf426443d4

Fixed

66d29d757c968d2bee9124816da5d718eb352959

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

2bfe15c5261212130f1a71f32a300bcf426443d4

Fixed

e3eed01347721cd7a8819568161c91d538fbf229

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

2bfe15c5261212130f1a71f32a300bcf426443d4

Fixed

f94c422157f3e43dd31990567b3e5d54b3e5b32b

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

2bfe15c5261212130f1a71f32a300bcf426443d4

Fixed

6ca45ea48530332a4ba09595767bd26d3232743b

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

2bfe15c5261212130f1a71f32a300bcf426443d4

Fixed

cbe4134ea4bc493239786220bd69cb8a13493190

Affected versions

v5.*

v5.19

v5.19-rc2

v5.19-rc3

v5.19-rc4

v5.19-rc5

v5.19-rc6

v5.19-rc7

v5.19-rc8

v6.*

v6.0

v6.0-rc1

v6.0-rc2

v6.0-rc3

v6.0-rc4

v6.0-rc5

v6.0-rc6

v6.0-rc7

v6.1

v6.1-rc1

v6.1-rc2

v6.1-rc3

v6.1-rc4

v6.1-rc5

v6.1-rc6

v6.1-rc7

v6.1-rc8

v6.1.1

v6.1.10

v6.1.100

v6.1.101

v6.1.102

v6.1.103

v6.1.104

v6.1.105

v6.1.106

v6.1.107

v6.1.108

v6.1.109

v6.1.11

v6.1.110

v6.1.111

v6.1.112

v6.1.113

v6.1.114

v6.1.115

v6.1.116

v6.1.117

v6.1.118

v6.1.119

v6.1.12

v6.1.120

v6.1.121

v6.1.122

v6.1.123

v6.1.124

v6.1.125

v6.1.126

v6.1.127

v6.1.128

v6.1.129

v6.1.13

v6.1.130

v6.1.131

v6.1.132

v6.1.133

v6.1.134

v6.1.135

v6.1.136

v6.1.137

v6.1.138

v6.1.139

v6.1.14

v6.1.140

v6.1.141

v6.1.142

v6.1.143

v6.1.144

v6.1.145

v6.1.15

v6.1.16

v6.1.17

v6.1.18

v6.1.19

v6.1.2

v6.1.20

v6.1.21

v6.1.22

v6.1.23

v6.1.24

v6.1.25

v6.1.26

v6.1.27

v6.1.28

v6.1.29

v6.1.3

v6.1.30

v6.1.31

v6.1.32

v6.1.33

v6.1.34

v6.1.35

v6.1.36

v6.1.37

v6.1.38

v6.1.39

v6.1.4

v6.1.40

v6.1.41

v6.1.42

v6.1.43

v6.1.44

v6.1.45

v6.1.46

v6.1.47

v6.1.48

v6.1.49

v6.1.5

v6.1.50

v6.1.51

v6.1.52

v6.1.53

v6.1.54

v6.1.55

v6.1.56

v6.1.57

v6.1.58

v6.1.59

v6.1.6

v6.1.60

v6.1.61

v6.1.62

v6.1.63

v6.1.64

v6.1.65

v6.1.66

v6.1.67

v6.1.68

v6.1.69

v6.1.7

v6.1.70

v6.1.71

v6.1.72

v6.1.73

v6.1.74

v6.1.75

v6.1.76

v6.1.77

v6.1.78

v6.1.79

v6.1.8

v6.1.80

v6.1.81

v6.1.82

v6.1.83

v6.1.84

v6.1.85

v6.1.86

v6.1.87

v6.1.88

v6.1.89

v6.1.9

v6.1.90

v6.1.91

v6.1.92

v6.1.93

v6.1.94

v6.1.95

v6.1.96

v6.1.97

v6.1.98

v6.1.99

v6.10

v6.10-rc1

v6.10-rc2

v6.10-rc3

v6.10-rc4

v6.10-rc5

v6.10-rc6

v6.10-rc7

v6.11

v6.11-rc1

v6.11-rc2

v6.11-rc3

v6.11-rc4

v6.11-rc5

v6.11-rc6

v6.11-rc7

v6.12

v6.12-rc1

v6.12-rc2

v6.12-rc3

v6.12-rc4

v6.12-rc5

v6.12-rc6

v6.12-rc7

v6.12.1

v6.12.10

v6.12.11

v6.12.12

v6.12.13

v6.12.14

v6.12.15

v6.12.16

v6.12.17

v6.12.18

v6.12.19

v6.12.2

v6.12.20

v6.12.21

v6.12.22

v6.12.23

v6.12.24

v6.12.25

v6.12.26

v6.12.27

v6.12.28

v6.12.29

v6.12.3

v6.12.30

v6.12.31

v6.12.32

v6.12.33

v6.12.34

v6.12.35

v6.12.36

v6.12.4

v6.12.5

v6.12.6

v6.12.7

v6.12.8

v6.12.9

v6.13

v6.13-rc1

v6.13-rc2

v6.13-rc3

v6.13-rc4

v6.13-rc5

v6.13-rc6

v6.13-rc7

v6.14

v6.14-rc1

v6.14-rc2

v6.14-rc3

v6.14-rc4

v6.14-rc5

v6.14-rc6

v6.14-rc7

v6.15

v6.15-rc1

v6.15-rc2

v6.15-rc3

v6.15-rc4

v6.15-rc5

v6.15-rc6

v6.15-rc7

v6.15.1

v6.15.2

v6.15.3

v6.15.4

v6.15.5

v6.16-rc1

v6.16-rc2

v6.2

v6.2-rc1

v6.2-rc2

v6.2-rc3

v6.2-rc4

v6.2-rc5

v6.2-rc6

v6.2-rc7

v6.2-rc8

v6.3

v6.3-rc1

v6.3-rc2

v6.3-rc3

v6.3-rc4

v6.3-rc5

v6.3-rc6

v6.3-rc7

v6.4

v6.4-rc1

v6.4-rc2

v6.4-rc3

v6.4-rc4

v6.4-rc5

v6.4-rc6

v6.4-rc7

v6.5

v6.5-rc1

v6.5-rc2

v6.5-rc3

v6.5-rc4

v6.5-rc5

v6.5-rc6

v6.5-rc7

v6.6

v6.6-rc1

v6.6-rc2

v6.6-rc3

v6.6-rc4

v6.6-rc5

v6.6-rc6

v6.6-rc7

v6.6.1

v6.6.10

v6.6.11

v6.6.12

v6.6.13

v6.6.14

v6.6.15

v6.6.16

v6.6.17

v6.6.18

v6.6.19

v6.6.2

v6.6.20

v6.6.21

v6.6.22

v6.6.23

v6.6.24

v6.6.25

v6.6.26

v6.6.27

v6.6.28

v6.6.29

v6.6.3

v6.6.30

v6.6.31

v6.6.32

v6.6.33

v6.6.34

v6.6.35

v6.6.36

v6.6.37

v6.6.38

v6.6.39

v6.6.4

v6.6.40

v6.6.41

v6.6.42

v6.6.43

v6.6.44

v6.6.45

v6.6.46

v6.6.47

v6.6.48

v6.6.49

v6.6.5

v6.6.50

v6.6.51

v6.6.52

v6.6.53

v6.6.54

v6.6.55

v6.6.56

v6.6.57

v6.6.58

v6.6.59

v6.6.6

v6.6.60

v6.6.61

v6.6.62

v6.6.63

v6.6.64

v6.6.65

v6.6.66

v6.6.67

v6.6.68

v6.6.69

v6.6.7

v6.6.70

v6.6.71

v6.6.72

v6.6.73

v6.6.74

v6.6.75

v6.6.76

v6.6.77

v6.6.78

v6.6.79

v6.6.8

v6.6.80

v6.6.81

v6.6.82

v6.6.83

v6.6.84

v6.6.85

v6.6.86

v6.6.87

v6.6.88

v6.6.89

v6.6.9

v6.6.90

v6.6.91

v6.6.92

v6.6.93

v6.6.94

v6.6.95

v6.6.96

v6.7

v6.7-rc1

v6.7-rc2

v6.7-rc3

v6.7-rc4

v6.7-rc5

v6.7-rc6

v6.7-rc7

v6.7-rc8

v6.8

v6.8-rc1

v6.8-rc2

v6.8-rc3

v6.8-rc4

v6.8-rc5

v6.8-rc6

v6.8-rc7

v6.9

v6.9-rc1

v6.9-rc2

v6.9-rc3

v6.9-rc4

v6.9-rc5

v6.9-rc6

v6.9-rc7

Database specific

vanir_signatures

[
    {
        "signature_type": "Line",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@66d29d757c968d2bee9124816da5d718eb352959",
        "signature_version": "v1",
        "target": {
            "file": "mm/secretmem.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "160445078900020207001142678828053194918",
                "193020039974860973132105420744119240214",
                "141901971250339994220577222659869521011",
                "56403245935948420984971900974784006411",
                "117310897637701415992797625333630358194",
                "30250683439519690504405318258377898324",
                "17765705201165935014761394169715759287",
                "69244568148145581055182975874603282881",
                "330955056616686273313963026648789739252",
                "110899355897169672194459964332261435976",
                "83569519560985040706773524979518867510",
                "252561431908932375657126763735683195981",
                "59974075689819414394892124179600197219"
            ]
        },
        "id": "CVE-2025-38396-09d1b14f"
    },
    {
        "signature_type": "Line",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f94c422157f3e43dd31990567b3e5d54b3e5b32b",
        "signature_version": "v1",
        "target": {
            "file": "fs/anon_inodes.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "202726532247333856193166854722395709245",
                "207985551313559522811487555458448319354",
                "49397199051395961248565704746577749244",
                "41543260459111431336597802015482263800",
                "161745298754163086815969551380423531521",
                "305488507391409185586087428623209491905",
                "221599381873476308005553480474690527575",
                "38671309219832592338256294407028634164",
                "191274980145167909327694094569985557675",
                "141235748443217275302515387476579924696",
                "212209605849480621429239741622825305287",
                "120974891556351091136408239759982463385",
                "245352666674311630124129846392773416574",
                "53195259890004814827315121410582880125",
                "37880545291076053375053168470322858753",
                "82795278929151027684233610967709595619",
                "317675401479096001053574902973865211561",
                "161117307828351305650783879120412328754"
            ]
        },
        "id": "CVE-2025-38396-13ea0d5b"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@66d29d757c968d2bee9124816da5d718eb352959",
        "signature_version": "v1",
        "target": {
            "function": "__anon_inode_getfile",
            "file": "fs/anon_inodes.c"
        },
        "digest": {
            "function_hash": "317383122731748026325912050487821673185",
            "length": 786.0
        },
        "id": "CVE-2025-38396-1622edd1"
    },
    {
        "signature_type": "Line",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e3eed01347721cd7a8819568161c91d538fbf229",
        "signature_version": "v1",
        "target": {
            "file": "include/linux/fs.h"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "207726819013541388511098376761365913198",
                "273002786557251893163822353844911930250",
                "119939327220714794194032301263592176107",
                "241985726690896441920134635240954445571"
            ]
        },
        "id": "CVE-2025-38396-23598578"
    },
    {
        "signature_type": "Line",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6ca45ea48530332a4ba09595767bd26d3232743b",
        "signature_version": "v1",
        "target": {
            "file": "mm/secretmem.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "216335622451477151513000161096908227094",
                "235721513737858809352334670660425681325",
                "127801396403787769775982171608095369875",
                "117310897637701415992797625333630358194",
                "319830109213997899646641305153015621304",
                "332130743295659499743751020074810182169",
                "322759496747919253159581125829775866723",
                "322771705113763245555130642964085943802",
                "110899355897169672194459964332261435976",
                "83569519560985040706773524979518867510",
                "252561431908932375657126763735683195981",
                "59974075689819414394892124179600197219"
            ]
        },
        "id": "CVE-2025-38396-2e60271b"
    },
    {
        "signature_type": "Line",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@66d29d757c968d2bee9124816da5d718eb352959",
        "signature_version": "v1",
        "target": {
            "file": "include/linux/fs.h"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "207726819013541388511098376761365913198",
                "250566445383168244310849878796485951431",
                "214662320691963691763461682232284122246",
                "127244351083241668827115210577230536405"
            ]
        },
        "id": "CVE-2025-38396-4031108b"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cbe4134ea4bc493239786220bd69cb8a13493190",
        "signature_version": "v1",
        "target": {
            "function": "anon_inode_make_secure_inode",
            "file": "fs/anon_inodes.c"
        },
        "digest": {
            "function_hash": "338847357121277572140676992255266683980",
            "length": 382.0
        },
        "id": "CVE-2025-38396-4efe05c4"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@66d29d757c968d2bee9124816da5d718eb352959",
        "signature_version": "v1",
        "target": {
            "function": "secretmem_file_create",
            "file": "mm/secretmem.c"
        },
        "digest": {
            "function_hash": "96187983622938630441811629313277053771",
            "length": 802.0
        },
        "id": "CVE-2025-38396-5024915f"
    },
    {
        "signature_type": "Line",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cbe4134ea4bc493239786220bd69cb8a13493190",
        "signature_version": "v1",
        "target": {
            "file": "fs/anon_inodes.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "202726532247333856193166854722395709245",
                "207985551313559522811487555458448319354",
                "49397199051395961248565704746577749244",
                "41543260459111431336597802015482263800",
                "161745298754163086815969551380423531521",
                "305488507391409185586087428623209491905",
                "221599381873476308005553480474690527575",
                "38671309219832592338256294407028634164",
                "191274980145167909327694094569985557675",
                "141235748443217275302515387476579924696",
                "212209605849480621429239741622825305287",
                "120974891556351091136408239759982463385",
                "245352666674311630124129846392773416574",
                "53195259890004814827315121410582880125",
                "37880545291076053375053168470322858753",
                "82795278929151027684233610967709595619",
                "317675401479096001053574902973865211561",
                "161117307828351305650783879120412328754"
            ]
        },
        "id": "CVE-2025-38396-53e1d70e"
    },
    {
        "signature_type": "Line",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f94c422157f3e43dd31990567b3e5d54b3e5b32b",
        "signature_version": "v1",
        "target": {
            "file": "mm/secretmem.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "216335622451477151513000161096908227094",
                "235721513737858809352334670660425681325",
                "127801396403787769775982171608095369875",
                "117310897637701415992797625333630358194",
                "319830109213997899646641305153015621304",
                "332130743295659499743751020074810182169",
                "322759496747919253159581125829775866723",
                "322771705113763245555130642964085943802",
                "110899355897169672194459964332261435976",
                "83569519560985040706773524979518867510",
                "252561431908932375657126763735683195981",
                "59974075689819414394892124179600197219"
            ]
        },
        "id": "CVE-2025-38396-5b12703f"
    },
    {
        "signature_type": "Line",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6ca45ea48530332a4ba09595767bd26d3232743b",
        "signature_version": "v1",
        "target": {
            "file": "include/linux/fs.h"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "278542020903518667180077692092152691066",
                "184687390549678345549010836381321926918",
                "187292549237263686132833786067626341359",
                "122531036811374890699403008944502603246"
            ]
        },
        "id": "CVE-2025-38396-5fc97825"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6ca45ea48530332a4ba09595767bd26d3232743b",
        "signature_version": "v1",
        "target": {
            "function": "__anon_inode_getfile",
            "file": "fs/anon_inodes.c"
        },
        "digest": {
            "function_hash": "317383122731748026325912050487821673185",
            "length": 786.0
        },
        "id": "CVE-2025-38396-7e66803a"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e3eed01347721cd7a8819568161c91d538fbf229",
        "signature_version": "v1",
        "target": {
            "function": "anon_inode_make_secure_inode",
            "file": "fs/anon_inodes.c"
        },
        "digest": {
            "function_hash": "46358320037710069693825722760916002249",
            "length": 387.0
        },
        "id": "CVE-2025-38396-891cc6b4"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e3eed01347721cd7a8819568161c91d538fbf229",
        "signature_version": "v1",
        "target": {
            "function": "__anon_inode_getfile",
            "file": "fs/anon_inodes.c"
        },
        "digest": {
            "function_hash": "317383122731748026325912050487821673185",
            "length": 786.0
        },
        "id": "CVE-2025-38396-8a354582"
    },
    {
        "signature_type": "Line",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cbe4134ea4bc493239786220bd69cb8a13493190",
        "signature_version": "v1",
        "target": {
            "file": "mm/secretmem.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "216335622451477151513000161096908227094",
                "235721513737858809352334670660425681325",
                "127801396403787769775982171608095369875",
                "117310897637701415992797625333630358194",
                "319830109213997899646641305153015621304",
                "332130743295659499743751020074810182169",
                "322759496747919253159581125829775866723",
                "322771705113763245555130642964085943802",
                "110899355897169672194459964332261435976",
                "83569519560985040706773524979518867510",
                "252561431908932375657126763735683195981",
                "59974075689819414394892124179600197219"
            ]
        },
        "id": "CVE-2025-38396-8ded544a"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f94c422157f3e43dd31990567b3e5d54b3e5b32b",
        "signature_version": "v1",
        "target": {
            "function": "__anon_inode_getfile",
            "file": "fs/anon_inodes.c"
        },
        "digest": {
            "function_hash": "317383122731748026325912050487821673185",
            "length": 786.0
        },
        "id": "CVE-2025-38396-987bbb97"
    },
    {
        "signature_type": "Line",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cbe4134ea4bc493239786220bd69cb8a13493190",
        "signature_version": "v1",
        "target": {
            "file": "include/linux/fs.h"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "278542020903518667180077692092152691066",
                "184687390549678345549010836381321926918",
                "187292549237263686132833786067626341359",
                "122531036811374890699403008944502603246"
            ]
        },
        "id": "CVE-2025-38396-9f652bde"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cbe4134ea4bc493239786220bd69cb8a13493190",
        "signature_version": "v1",
        "target": {
            "function": "secretmem_file_create",
            "file": "mm/secretmem.c"
        },
        "digest": {
            "function_hash": "9146107283012255051361014157227253944",
            "length": 735.0
        },
        "id": "CVE-2025-38396-a49d1f5a"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e3eed01347721cd7a8819568161c91d538fbf229",
        "signature_version": "v1",
        "target": {
            "function": "secretmem_file_create",
            "file": "mm/secretmem.c"
        },
        "digest": {
            "function_hash": "247158451956034610087899683252937030292",
            "length": 778.0
        },
        "id": "CVE-2025-38396-ac93fe30"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f94c422157f3e43dd31990567b3e5d54b3e5b32b",
        "signature_version": "v1",
        "target": {
            "function": "anon_inode_make_secure_inode",
            "file": "fs/anon_inodes.c"
        },
        "digest": {
            "function_hash": "214628964465819708086419052528160717232",
            "length": 342.0
        },
        "id": "CVE-2025-38396-adfd5a82"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cbe4134ea4bc493239786220bd69cb8a13493190",
        "signature_version": "v1",
        "target": {
            "function": "__anon_inode_getfile",
            "file": "fs/anon_inodes.c"
        },
        "digest": {
            "function_hash": "317383122731748026325912050487821673185",
            "length": 786.0
        },
        "id": "CVE-2025-38396-b6730662"
    },
    {
        "signature_type": "Line",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e3eed01347721cd7a8819568161c91d538fbf229",
        "signature_version": "v1",
        "target": {
            "file": "mm/secretmem.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "51044642952895111223965532216070647536",
                "193020039974860973132105420744119240214",
                "141901971250339994220577222659869521011",
                "56403245935948420984971900974784006411",
                "117310897637701415992797625333630358194",
                "30250683439519690504405318258377898324",
                "17765705201165935014761394169715759287",
                "69244568148145581055182975874603282881",
                "330955056616686273313963026648789739252",
                "110899355897169672194459964332261435976",
                "83569519560985040706773524979518867510",
                "252561431908932375657126763735683195981",
                "59974075689819414394892124179600197219"
            ]
        },
        "id": "CVE-2025-38396-baa550a4"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@66d29d757c968d2bee9124816da5d718eb352959",
        "signature_version": "v1",
        "target": {
            "function": "anon_inode_make_secure_inode",
            "file": "fs/anon_inodes.c"
        },
        "digest": {
            "function_hash": "46358320037710069693825722760916002249",
            "length": 387.0
        },
        "id": "CVE-2025-38396-caec54f7"
    },
    {
        "signature_type": "Line",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e3eed01347721cd7a8819568161c91d538fbf229",
        "signature_version": "v1",
        "target": {
            "file": "fs/anon_inodes.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "202726532247333856193166854722395709245",
                "207985551313559522811487555458448319354",
                "49397199051395961248565704746577749244",
                "41543260459111431336597802015482263800",
                "161745298754163086815969551380423531521",
                "6741026106160597920880681267167450651",
                "28628907984578163400781109544867519312",
                "8183179108087397168271912699830956492",
                "69469417920981794921692134207666103780",
                "191274980145167909327694094569985557675",
                "141235748443217275302515387476579924696",
                "212209605849480621429239741622825305287",
                "120974891556351091136408239759982463385",
                "245352666674311630124129846392773416574",
                "53195259890004814827315121410582880125",
                "25698330599883587756663528205536484023",
                "168995733753993067682521407079943274352",
                "276710705997582279010490200848168821322",
                "161117307828351305650783879120412328754"
            ]
        },
        "id": "CVE-2025-38396-cb3d2798"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6ca45ea48530332a4ba09595767bd26d3232743b",
        "signature_version": "v1",
        "target": {
            "function": "secretmem_file_create",
            "file": "mm/secretmem.c"
        },
        "digest": {
            "function_hash": "9146107283012255051361014157227253944",
            "length": 735.0
        },
        "id": "CVE-2025-38396-e3689f86"
    },
    {
        "signature_type": "Line",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6ca45ea48530332a4ba09595767bd26d3232743b",
        "signature_version": "v1",
        "target": {
            "file": "fs/anon_inodes.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "202726532247333856193166854722395709245",
                "207985551313559522811487555458448319354",
                "49397199051395961248565704746577749244",
                "41543260459111431336597802015482263800",
                "161745298754163086815969551380423531521",
                "305488507391409185586087428623209491905",
                "221599381873476308005553480474690527575",
                "38671309219832592338256294407028634164",
                "191274980145167909327694094569985557675",
                "141235748443217275302515387476579924696",
                "212209605849480621429239741622825305287",
                "120974891556351091136408239759982463385",
                "245352666674311630124129846392773416574",
                "53195259890004814827315121410582880125",
                "37880545291076053375053168470322858753",
                "82795278929151027684233610967709595619",
                "317675401479096001053574902973865211561",
                "161117307828351305650783879120412328754"
            ]
        },
        "id": "CVE-2025-38396-eb2124cf"
    },
    {
        "signature_type": "Line",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@66d29d757c968d2bee9124816da5d718eb352959",
        "signature_version": "v1",
        "target": {
            "file": "fs/anon_inodes.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "202726532247333856193166854722395709245",
                "207985551313559522811487555458448319354",
                "49397199051395961248565704746577749244",
                "41543260459111431336597802015482263800",
                "161745298754163086815969551380423531521",
                "6741026106160597920880681267167450651",
                "28628907984578163400781109544867519312",
                "8183179108087397168271912699830956492",
                "69469417920981794921692134207666103780",
                "191274980145167909327694094569985557675",
                "141235748443217275302515387476579924696",
                "212209605849480621429239741622825305287",
                "120974891556351091136408239759982463385",
                "245352666674311630124129846392773416574",
                "53195259890004814827315121410582880125",
                "25698330599883587756663528205536484023",
                "168995733753993067682521407079943274352",
                "276710705997582279010490200848168821322",
                "161117307828351305650783879120412328754"
            ]
        },
        "id": "CVE-2025-38396-ed0ada0a"
    },
    {
        "signature_type": "Line",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f94c422157f3e43dd31990567b3e5d54b3e5b32b",
        "signature_version": "v1",
        "target": {
            "file": "include/linux/fs.h"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "278542020903518667180077692092152691066",
                "184687390549678345549010836381321926918",
                "187292549237263686132833786067626341359",
                "122531036811374890699403008944502603246"
            ]
        },
        "id": "CVE-2025-38396-f364fd95"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6ca45ea48530332a4ba09595767bd26d3232743b",
        "signature_version": "v1",
        "target": {
            "function": "anon_inode_make_secure_inode",
            "file": "fs/anon_inodes.c"
        },
        "digest": {
            "function_hash": "338847357121277572140676992255266683980",
            "length": 382.0
        },
        "id": "CVE-2025-38396-f59a2371"
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f94c422157f3e43dd31990567b3e5d54b3e5b32b",
        "signature_version": "v1",
        "target": {
            "function": "secretmem_file_create",
            "file": "mm/secretmem.c"
        },
        "digest": {
            "function_hash": "9146107283012255051361014157227253944",
            "length": 735.0
        },
        "id": "CVE-2025-38396-f9f4b355"
    }
]

Linux / Kernel

Package

Name: Kernel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

6.0.0

Fixed

6.1.146

Type: ECOSYSTEM
Events: Introduced

6.2.0

Fixed

6.6.97

Type: ECOSYSTEM
Events: Introduced

6.7.0

Fixed

6.12.37

Type: ECOSYSTEM
Events: Introduced

6.13.0

Fixed

6.15.6