CVE-2025-38462

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-38462
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-38462.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-38462
Downstream
Related
Published
2025-07-25T15:27:45.168Z
Modified
2026-05-07T04:18:08.038328Z
Summary
vsock: Fix transport_{g2h,h2g} TOCTOU
Details

In the Linux kernel, the following vulnerability has been resolved:

vsock: Fix transport_{g2h,h2g} TOCTOU

vsockfindcid() and vsockdevdoioctl() may race with module unload. transport{g2h,h2g} may become NULL after the NULL check.

Introduce vsocktransportlocal_cid() to protect from a potential null-ptr-deref.

KASAN: null-ptr-deref in range [0x0000000000000118-0x000000000000011f] RIP: 0010:vsockfindcid+0x47/0x90 Call Trace: __vsockbind+0x4b2/0x720 vsockbind+0x90/0xe0 __sys_bind+0x14d/0x1e0 __x64sysbind+0x6e/0xc0 dosyscall64+0x92/0x1c0 entrySYSCALL64afterhwframe+0x4b/0x53

KASAN: null-ptr-deref in range [0x0000000000000118-0x000000000000011f] RIP: 0010:vsockdevdo_ioctl.isra.0+0x58/0xf0 Call Trace: __x64sysioctl+0x12d/0x190 dosyscall64+0x92/0x1c0 entrySYSCALL64afterhwframe+0x4b/0x53

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38462.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
c0cfa2d8a788fcf45df5bf4070ab2474c88d543a
Fixed
c5496ee685c48ed1cc183cd4263602579bb4a615
Fixed
80d7dc15805a93d520a249ac6d13d4f4df161c1b
Fixed
5752d8dbb3dfd7f1a9faf0f65377e60826ea9a17
Fixed
401239811fa728fcdd53e360a91f157ffd23e1f4
Fixed
3734d78210cceb2ee5615719a62a5c55ed381ff8
Fixed
6a1bcab67bea797d83aa9dd948a0ac6ed52d121d
Fixed
209fd720838aaf1420416494c5505096478156b4

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-38462.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.240
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.189
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.146
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.99
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.39
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.15.7

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-38462.json"