In the Linux kernel, the following vulnerability has been resolved:
net/packet: fix a race in packetsetring() and packet_notifier()
When packetsetring() releases po->bindlock, another thread can run packetnotifier() and process an NETDEV_UP event.
This race and the fix are both similar to that of commit 15fe076edea7 ("net/packet: fix a race in packetbind() and packetnotifier()").
There too the packetnotifier NETDEVUP event managed to run while a po->bind_lock critical section had to be temporarily released. And the fix was similarly to temporarily set po->num to zero to keep the socket unhooked until the lock is retaken.
The po->bindlock in packetsetring and packetnotifier precede the introduction of git history.
[
{
"id": "CVE-2025-38617-30ea5aca",
"deprecated": false,
"digest": {
"length": 3616.0,
"function_hash": "161362001478099740421038800012168548852"
},
"target": {
"file": "net/packet/af_packet.c",
"function": "packet_set_ring"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7da733f117533e9b2ebbd530a22ae4028713955c",
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2025-38617-3501e771",
"deprecated": false,
"digest": {
"line_hashes": [
"187814018772547638796048202434266118935",
"160142975435406087962525095471229447012",
"51732418720482338745835351701232867706",
"200791558032728507340636214056043051202",
"143986996392675936498315497300814259651",
"273153404329156390081303477828041830520",
"93080688338559169313130024565058701086",
"334191543607056899255650961578101002437",
"292773854171082058154636139777202561463",
"3520535698101620830557999019785839944",
"211137911565594853254544806718711606920",
"129618664355485374242314024583196746908",
"314219754291000480975770594816069413613",
"133439028302893350307817723131554563880"
],
"threshold": 0.9
},
"target": {
"file": "net/packet/af_packet.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e50ccfaca9e3c671cae917dcb994831a859cf588",
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2025-38617-3abd766e",
"deprecated": false,
"digest": {
"line_hashes": [
"256674804395849288960738662291699219008",
"164025626522020212331940142038596943012",
"51732418720482338745835351701232867706",
"200791558032728507340636214056043051202",
"143986996392675936498315497300814259651",
"273153404329156390081303477828041830520",
"93080688338559169313130024565058701086",
"334191543607056899255650961578101002437",
"292773854171082058154636139777202561463",
"3520535698101620830557999019785839944",
"211137911565594853254544806718711606920",
"129618664355485374242314024583196746908",
"314219754291000480975770594816069413613",
"133439028302893350307817723131554563880"
],
"threshold": 0.9
},
"target": {
"file": "net/packet/af_packet.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ba2257034755ae773722f15f4c3ad1dcdad15ca9",
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2025-38617-4b1bfa82",
"deprecated": false,
"digest": {
"length": 3640.0,
"function_hash": "130099889235526469707093689622281199868"
},
"target": {
"file": "net/packet/af_packet.c",
"function": "packet_set_ring"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e50ccfaca9e3c671cae917dcb994831a859cf588",
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2025-38617-6c70d7a8",
"deprecated": false,
"digest": {
"length": 3627.0,
"function_hash": "1163582725713337086479022150689706170"
},
"target": {
"file": "net/packet/af_packet.c",
"function": "packet_set_ring"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@18f13f2a83eb81be349a9757ba2141ff1da9ad73",
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2025-38617-8a33af61",
"deprecated": false,
"digest": {
"line_hashes": [
"187814018772547638796048202434266118935",
"160142975435406087962525095471229447012",
"51732418720482338745835351701232867706",
"200791558032728507340636214056043051202",
"143986996392675936498315497300814259651",
"273153404329156390081303477828041830520",
"93080688338559169313130024565058701086",
"334191543607056899255650961578101002437",
"292773854171082058154636139777202561463",
"3520535698101620830557999019785839944",
"211137911565594853254544806718711606920",
"129618664355485374242314024583196746908",
"314219754291000480975770594816069413613",
"133439028302893350307817723131554563880"
],
"threshold": 0.9
},
"target": {
"file": "net/packet/af_packet.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@88caf46db8239e6471413d28aabaa6b8bd552805",
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2025-38617-9440bde3",
"deprecated": false,
"digest": {
"line_hashes": [
"256674804395849288960738662291699219008",
"164025626522020212331940142038596943012",
"51732418720482338745835351701232867706",
"200791558032728507340636214056043051202",
"143986996392675936498315497300814259651",
"273153404329156390081303477828041830520",
"93080688338559169313130024565058701086",
"334191543607056899255650961578101002437",
"292773854171082058154636139777202561463",
"3520535698101620830557999019785839944",
"211137911565594853254544806718711606920",
"129618664355485374242314024583196746908",
"314219754291000480975770594816069413613",
"133439028302893350307817723131554563880"
],
"threshold": 0.9
},
"target": {
"file": "net/packet/af_packet.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@18f13f2a83eb81be349a9757ba2141ff1da9ad73",
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2025-38617-a978a823",
"deprecated": false,
"digest": {
"length": 3640.0,
"function_hash": "130099889235526469707093689622281199868"
},
"target": {
"file": "net/packet/af_packet.c",
"function": "packet_set_ring"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f2e8fcfd2b1bc754920108b7f2cd75082c5a18df",
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2025-38617-a98c41c0",
"deprecated": false,
"digest": {
"line_hashes": [
"256674804395849288960738662291699219008",
"164025626522020212331940142038596943012",
"51732418720482338745835351701232867706",
"200791558032728507340636214056043051202",
"143986996392675936498315497300814259651",
"273153404329156390081303477828041830520",
"93080688338559169313130024565058701086",
"334191543607056899255650961578101002437",
"292773854171082058154636139777202561463",
"3520535698101620830557999019785839944",
"211137911565594853254544806718711606920",
"129618664355485374242314024583196746908",
"314219754291000480975770594816069413613",
"133439028302893350307817723131554563880"
],
"threshold": 0.9
},
"target": {
"file": "net/packet/af_packet.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7da733f117533e9b2ebbd530a22ae4028713955c",
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2025-38617-b4a3fdc7",
"deprecated": false,
"digest": {
"line_hashes": [
"256674804395849288960738662291699219008",
"164025626522020212331940142038596943012",
"51732418720482338745835351701232867706",
"200791558032728507340636214056043051202",
"143986996392675936498315497300814259651",
"273153404329156390081303477828041830520",
"93080688338559169313130024565058701086",
"334191543607056899255650961578101002437",
"292773854171082058154636139777202561463",
"3520535698101620830557999019785839944",
"211137911565594853254544806718711606920",
"129618664355485374242314024583196746908",
"314219754291000480975770594816069413613",
"133439028302893350307817723131554563880"
],
"threshold": 0.9
},
"target": {
"file": "net/packet/af_packet.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7de07705007c7e34995a5599aaab1d23e762d7ca",
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2025-38617-b7157aa1",
"deprecated": false,
"digest": {
"length": 3616.0,
"function_hash": "161362001478099740421038800012168548852"
},
"target": {
"file": "net/packet/af_packet.c",
"function": "packet_set_ring"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ba2257034755ae773722f15f4c3ad1dcdad15ca9",
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2025-38617-cb642c9e",
"deprecated": false,
"digest": {
"line_hashes": [
"187814018772547638796048202434266118935",
"160142975435406087962525095471229447012",
"51732418720482338745835351701232867706",
"200791558032728507340636214056043051202",
"143986996392675936498315497300814259651",
"273153404329156390081303477828041830520",
"93080688338559169313130024565058701086",
"334191543607056899255650961578101002437",
"292773854171082058154636139777202561463",
"3520535698101620830557999019785839944",
"211137911565594853254544806718711606920",
"129618664355485374242314024583196746908",
"314219754291000480975770594816069413613",
"133439028302893350307817723131554563880"
],
"threshold": 0.9
},
"target": {
"file": "net/packet/af_packet.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f2e8fcfd2b1bc754920108b7f2cd75082c5a18df",
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2025-38617-ec8f341d",
"deprecated": false,
"digest": {
"length": 3640.0,
"function_hash": "130099889235526469707093689622281199868"
},
"target": {
"file": "net/packet/af_packet.c",
"function": "packet_set_ring"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@01d3c8417b9c1b884a8a981a3b886da556512f36",
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2025-38617-ede52ddc",
"deprecated": false,
"digest": {
"length": 3616.0,
"function_hash": "161362001478099740421038800012168548852"
},
"target": {
"file": "net/packet/af_packet.c",
"function": "packet_set_ring"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7de07705007c7e34995a5599aaab1d23e762d7ca",
"signature_type": "Function",
"signature_version": "v1"
},
{
"id": "CVE-2025-38617-fadb7d67",
"deprecated": false,
"digest": {
"line_hashes": [
"187814018772547638796048202434266118935",
"160142975435406087962525095471229447012",
"51732418720482338745835351701232867706",
"200791558032728507340636214056043051202",
"143986996392675936498315497300814259651",
"273153404329156390081303477828041830520",
"93080688338559169313130024565058701086",
"334191543607056899255650961578101002437",
"292773854171082058154636139777202561463",
"3520535698101620830557999019785839944",
"211137911565594853254544806718711606920",
"129618664355485374242314024583196746908",
"314219754291000480975770594816069413613",
"133439028302893350307817723131554563880"
],
"threshold": 0.9
},
"target": {
"file": "net/packet/af_packet.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@01d3c8417b9c1b884a8a981a3b886da556512f36",
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2025-38617-fd33443c",
"deprecated": false,
"digest": {
"length": 3640.0,
"function_hash": "130099889235526469707093689622281199868"
},
"target": {
"file": "net/packet/af_packet.c",
"function": "packet_set_ring"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@88caf46db8239e6471413d28aabaa6b8bd552805",
"signature_type": "Function",
"signature_version": "v1"
}
]