CVE-2025-38462

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-38462
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-38462.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-38462
Downstream
Related
Published
2025-07-25T15:27:45.168Z
Modified
2026-03-20T12:42:52.246234Z
Summary
vsock: Fix transport_{g2h,h2g} TOCTOU
Details

In the Linux kernel, the following vulnerability has been resolved:

vsock: Fix transport_{g2h,h2g} TOCTOU

vsockfindcid() and vsockdevdoioctl() may race with module unload. transport{g2h,h2g} may become NULL after the NULL check.

Introduce vsocktransportlocal_cid() to protect from a potential null-ptr-deref.

KASAN: null-ptr-deref in range [0x0000000000000118-0x000000000000011f] RIP: 0010:vsockfindcid+0x47/0x90 Call Trace: __vsockbind+0x4b2/0x720 vsockbind+0x90/0xe0 __sys_bind+0x14d/0x1e0 __x64sysbind+0x6e/0xc0 dosyscall64+0x92/0x1c0 entrySYSCALL64afterhwframe+0x4b/0x53

KASAN: null-ptr-deref in range [0x0000000000000118-0x000000000000011f] RIP: 0010:vsockdevdo_ioctl.isra.0+0x58/0xf0 Call Trace: __x64sysioctl+0x12d/0x190 dosyscall64+0x92/0x1c0 entrySYSCALL64afterhwframe+0x4b/0x53

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38462.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
c0cfa2d8a788fcf45df5bf4070ab2474c88d543a
Fixed
c5496ee685c48ed1cc183cd4263602579bb4a615
Fixed
80d7dc15805a93d520a249ac6d13d4f4df161c1b
Fixed
5752d8dbb3dfd7f1a9faf0f65377e60826ea9a17
Fixed
401239811fa728fcdd53e360a91f157ffd23e1f4
Fixed
3734d78210cceb2ee5615719a62a5c55ed381ff8
Fixed
6a1bcab67bea797d83aa9dd948a0ac6ed52d121d
Fixed
209fd720838aaf1420416494c5505096478156b4

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-38462.json"