CVE-2025-38617

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: A race condition exists in the packet set ring() and packet notifier() functions within the net/packet module. This occurs when packet set ring() releases po->bind lock, allowing another thread to execute packet notifier() and process an NETDEV UP event concurrently. This issue is similar to a previously resolved race condition addressed in commit 15fe076edea7. The fix involves temporarily setting po->num to zero to prevent socket unhooking until the lock is reacquired.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.