CVE-2025-38717

net: kcm: Fix race condition in kcm_unattach()

CVE-2025-38717 is fixed in 35 products on 1 platform, first by DEBIAN-CVE-2025-38717, released September 4, 2025. It is not reported as exploited. Patch Radar priority: Routine.

Routine
CVSS
5.5
Moderate
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0012
1st percentile

In the Linux kernel, the following vulnerability has been resolved: net: kcm: Fix race condition in kcm_unattach() syzbot found a race condition when kcm_unattach(psock) and kcm_release(kcm) are executed at the same time. kcm_unattach() is missing a check of the flag kcm->tx_stopped before calling queue_work(). If the kcm has a reserved psock, kcm_unattach() might get executed between cancel_work_sync() and unreserve_psock() in kcm_release(), requeuing kcm->tx_work right before kcm gets freed in kcm_done(). Remove kcm->tx_stopped and replace it by the less error-prone disable_work_sync().

Where it's fixed

ProductFixed inFixReleased
Linux
bpftool6.12 · amzn 2023 1:6.12.46-66.121.amzn2023 ALAS2023-2025-1208 Sep 23, 2025
bpftool6.12-debuginfo · amzn 2023 1:6.12.46-66.121.amzn2023 ALAS2023-2025-1208 Sep 23, 2025
dtb-aarch64 · opensuse-leap 16.0 6.12.0-160000.6.1 OPENSUSE-SU-2025:20081-1 Nov 25, 2025
kernel-64kb · opensuse-leap 16.0 6.12.0-160000.6.1 OPENSUSE-SU-2025:20081-1 Nov 25, 2025
kernel-64kb · sles 16.0 6.12.0-160000.6.1 SUSE-SU-2025:21139-1 Nov 25, 2025
kernel-default · opensuse-leap 16.0 6.12.0-160000.6.1 OPENSUSE-SU-2025:20081-1 Nov 25, 2025
kernel-default · sles 16.0 6.12.0-160000.6.1 SUSE-SU-2025:21139-1 Nov 25, 2025
kernel-default-base · opensuse-leap 16.0 6.12.0-160000.6.1.160000.2.4 OPENSUSE-SU-2025:20081-1 Nov 25, 2025
kernel-default-base · sles 16.0 6.12.0-160000.6.1.160000.2.4 SUSE-SU-2025:21139-1 Nov 25, 2025
kernel-docs · opensuse-leap 16.0 6.12.0-160000.6.1 OPENSUSE-SU-2025:20081-1 Nov 25, 2025
kernel-docs · sles 16.0 6.12.0-160000.6.1 SUSE-SU-2025:21139-1 Nov 25, 2025
kernel-kvmsmall · opensuse-leap 16.0 6.12.0-160000.6.1 OPENSUSE-SU-2025:20081-1 Nov 25, 2025
kernel-kvmsmall · sles 16.0 6.12.0-160000.6.1 SUSE-SU-2025:21139-1 Nov 25, 2025
kernel-livepatch-6.12.46-66.121 · amzn 2023 1:1.0-0.amzn2023 ALAS2023-2025-1208 Sep 23, 2025
kernel-obs-build · opensuse-leap 16.0 6.12.0-160000.6.1 OPENSUSE-SU-2025:20081-1 Nov 25, 2025
kernel-obs-qa · opensuse-leap 16.0 6.12.0-160000.6.1 OPENSUSE-SU-2025:20081-1 Nov 25, 2025
kernel-obs-qa · sles 16.0 6.12.0-160000.6.1 SUSE-SU-2025:21139-1 Nov 25, 2025
kernel-rt · opensuse-leap 16.0 6.12.0-160000.6.1 OPENSUSE-SU-2025:20081-1 Nov 25, 2025
kernel-source · opensuse-leap 16.0 6.12.0-160000.6.1 OPENSUSE-SU-2025:20081-1 Nov 25, 2025
kernel-source · sles 16.0 6.12.0-160000.6.1 SUSE-SU-2025:21139-1 Nov 25, 2025
kernel-syms · opensuse-leap 16.0 6.12.0-160000.6.1 OPENSUSE-SU-2025:20081-1 Nov 25, 2025
kernel-syms · sles 16.0 6.12.0-160000.6.1 SUSE-SU-2025:21139-1 Nov 25, 2025
kernel-zfcpdump · opensuse-leap 16.0 6.12.0-160000.6.1 OPENSUSE-SU-2025:20081-1 Nov 25, 2025
kernel-zfcpdump · sles 16.0 6.12.0-160000.6.1 SUSE-SU-2025:21139-1 Nov 25, 2025
kernel6.12 · amzn 2023 1:6.12.46-66.121.amzn2023 ALAS2023-2025-1208 Sep 23, 2025
kernel6.12-debuginfo · amzn 2023 1:6.12.46-66.121.amzn2023 ALAS2023-2025-1208 Sep 23, 2025
kernel6.12-debuginfo-common-aarch64 · amzn 2023 1:6.12.46-66.121.amzn2023 ALAS2023-2025-1208 Sep 23, 2025
kernel6.12-debuginfo-common-x86_64 · amzn 2023 1:6.12.46-66.121.amzn2023 ALAS2023-2025-1208 Sep 23, 2025
kernel6.12-devel · amzn 2023 1:6.12.46-66.121.amzn2023 ALAS2023-2025-1208 Sep 23, 2025
kernel6.12-headers · amzn 2023 1:6.12.46-66.121.amzn2023 ALAS2023-2025-1208 Sep 23, 2025
kernel6.12-libbpf · amzn 2023 1:6.12.46-66.121.amzn2023 ALAS2023-2025-1208 Sep 23, 2025
kernel6.12-libbpf-debuginfo · amzn 2023 1:6.12.46-66.121.amzn2023 ALAS2023-2025-1208 Sep 23, 2025
kernel6.12-libbpf-devel · amzn 2023 1:6.12.46-66.121.amzn2023 ALAS2023-2025-1208 Sep 23, 2025
kernel6.12-libbpf-static · amzn 2023 1:6.12.46-66.121.amzn2023 ALAS2023-2025-1208 Sep 23, 2025
kernel6.12-modules-extra · amzn 2023 1:6.12.46-66.121.amzn2023 ALAS2023-2025-1208 Sep 23, 2025
kernel6.12-modules-extra-common · amzn 2023 1:6.12.46-66.121.amzn2023 ALAS2023-2025-1208 Sep 23, 2025
kernel6.12-tools · amzn 2023 1:6.12.46-66.121.amzn2023 ALAS2023-2025-1208 Sep 23, 2025
kernel6.12-tools-debuginfo · amzn 2023 1:6.12.46-66.121.amzn2023 ALAS2023-2025-1208 Sep 23, 2025
kernel6.12-tools-devel · amzn 2023 1:6.12.46-66.121.amzn2023 ALAS2023-2025-1208 Sep 23, 2025
linux · Debian 13.5 (trixie) 6.12.43-1 DEBIAN-CVE-2025-38717 Sep 4, 2025
linux · Debian 14 6.16.3-1 DEBIAN-CVE-2025-38717 Sep 4, 2025
perf6.12 · amzn 2023 1:6.12.46-66.121.amzn2023 ALAS2023-2025-1208 Sep 23, 2025
perf6.12-debuginfo · amzn 2023 1:6.12.46-66.121.amzn2023 ALAS2023-2025-1208 Sep 23, 2025
python3-perf6.12 · amzn 2023 1:6.12.46-66.121.amzn2023 ALAS2023-2025-1208 Sep 23, 2025
python3-perf6.12-debuginfo · amzn 2023 1:6.12.46-66.121.amzn2023 ALAS2023-2025-1208 Sep 23, 2025

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.