CVE-2025-38617
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2025-38617
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-38617.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2025-38617
- Downstream
- Related
- Published
- 2025-08-22T13:01:23.963Z
- Modified
- 2025-11-28T02:35:15.092360Z
- Summary
- net/packet: fix a race in packet_set_ring() and packet_notifier()
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
net/packet: fix a race in packetsetring() and packet_notifier()
When packetsetring() releases po->bindlock, another thread can run packetnotifier() and process an NETDEV_UP event.
This race and the fix are both similar to that of commit 15fe076edea7 ("net/packet: fix a race in packetbind() and packetnotifier()").
There too the packetnotifier NETDEVUP event managed to run while a po->bind_lock critical section had to be temporarily released. And the fix was similarly to temporarily set po->num to zero to keep the socket unhooked until the lock is retaken.
The po->bindlock in packetsetring and packetnotifier precede the introduction of git history.
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38617.json" }- References
-
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- https://git.kernel.org/stable/c/01d3c8417b9c1b884a8a981a3b886da556512f36
- https://git.kernel.org/stable/c/18f13f2a83eb81be349a9757ba2141ff1da9ad73
- https://git.kernel.org/stable/c/7da733f117533e9b2ebbd530a22ae4028713955c
- https://git.kernel.org/stable/c/7de07705007c7e34995a5599aaab1d23e762d7ca
- https://git.kernel.org/stable/c/88caf46db8239e6471413d28aabaa6b8bd552805
- https://git.kernel.org/stable/c/ba2257034755ae773722f15f4c3ad1dcdad15ca9
- https://git.kernel.org/stable/c/e50ccfaca9e3c671cae917dcb994831a859cf588
- https://git.kernel.org/stable/c/f1791fd7b845bea0ce9674fcf2febee7bc87a893
- https://git.kernel.org/stable/c/f2e8fcfd2b1bc754920108b7f2cd75082c5a18df
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38617.json
- https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html
- https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html
- https://nvd.nist.gov/vuln/detail/CVE-2025-38617
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced1da177e4c3f41524e886b7f1b8a0c1fc7321cac2Fixed18f13f2a83eb81be349a9757ba2141ff1da9ad73Fixed7da733f117533e9b2ebbd530a22ae4028713955cFixedba2257034755ae773722f15f4c3ad1dcdad15ca9Fixed7de07705007c7e34995a5599aaab1d23e762d7caFixed88caf46db8239e6471413d28aabaa6b8bd552805Fixedf2e8fcfd2b1bc754920108b7f2cd75082c5a18dfFixede50ccfaca9e3c671cae917dcb994831a859cf588Fixedf1791fd7b845bea0ce9674fcf2febee7bc87a893Fixed01d3c8417b9c1b884a8a981a3b886da556512f36
Linux / Kernel
Package
- Name
- Kernel
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced2.6.12Fixed5.4.297
- Type
- ECOSYSTEM
- Events
-
Introduced5.5.0Fixed5.10.241
- Type
- ECOSYSTEM
- Events
-
Introduced5.11.0Fixed5.15.190
- Type
- ECOSYSTEM
- Events
-
Introduced5.16.0Fixed6.1.148
- Type
- ECOSYSTEM
- Events
-
Introduced6.2.0Fixed6.6.102
- Type
- ECOSYSTEM
- Events
-
Introduced6.7.0Fixed6.12.42
- Type
- ECOSYSTEM
- Events
-
Introduced6.13.0Fixed6.15.10
- Type
- ECOSYSTEM
- Events
-
Introduced6.16.0Fixed6.16.1