CVE-2025-38112

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-38112
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-38112.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-38112
Downstream
Related
Published
2025-07-03T08:35:21.276Z
Modified
2026-05-28T03:55:26.065331636Z
Summary
net: Fix TOCTOU issue in sk_is_readable()
Details

In the Linux kernel, the following vulnerability has been resolved:

net: Fix TOCTOU issue in skisreadable()

sk->skprot->sockisreadable is a valid function pointer when sk resides in a sockmap. After the last skpsockput() (which usually happens when socket is removed from sockmap), sk->skprot gets restored and sk->skprot->sockis_readable becomes NULL.

This makes skisreadable() racy, if the value of sk->sk_prot is reloaded after the initial check. Which in turn may lead to a null pointer dereference.

Ensure the function pointer does not turn NULL after the check.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38112.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
8934ce2fd08171e8605f7fada91ee7619fe17ab8
Fixed
c2b26638476baee154920bb587fc94ff1bf04336
Fixed
6fa68d7eab34d448a61aa24ea31e68b3231ed20d
Fixed
8926a7ef1977a832dd6bf702f1a99303dbf15b15
Fixed
ff55c85a923e043d59d26b20a673a1b4a219c310
Fixed
1e0de7582ceccbdbb227d4e0ddf65732f92526da
Fixed
1b367ba2f94251822577daed031d6b9a9e11ba91
Fixed
2660a544fdc0940bba15f70508a46cf9a6491230

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-38112.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.17.0
Fixed
5.10.239
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.186
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.142
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.94
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.34
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.15.3

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-38112.json"