AZL-66887
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-66887.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-66887
- Upstream
- Published
- 2025-09-04T16:15:41Z
- Modified
- 2026-04-01T05:21:04.726850Z
- Summary
- CVE-2025-38717 affecting package kernel 6.6.126.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
net: kcm: Fix race condition in kcm_unattach()
syzbot found a race condition when kcmunattach(psock) and kcmrelease(kcm) are executed at the same time.
kcmunattach() is missing a check of the flag kcm->txstopped before calling queue_work().
If the kcm has a reserved psock, kcmunattach() might get executed between cancelworksync() and unreservepsock() in kcmrelease(), requeuing kcm->txwork right before kcm gets freed in kcm_done().
Remove kcm->txstopped and replace it by the less error-prone disablework_sync().
- References