CVE-2025-38352

Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability

Linux Kernel

In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() If an exiting non-autoreaping task has already passed exit_notify() and calls handle_posix_cpu_timers() from IRQ, it can be reaped by its parent or debugger right after unlock_task_sighand(). If a concurrent posix_cpu_timer_del() runs at that moment, it won't be able to detect timer->it.cpu.firing != 0…

22. Jul 2025

Ausgewertete Quellen

• Debian
  https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html
• Debian
  https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-38352
• CISA
  Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability
• NVD
  CVE-2025-38352