PT-2025-27896 · Linux+3 · Linux Kernel+3

Published 2025-05-24 · Updated 2025-12-03 · CVE-2025-38175

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.15.0-rc7-00138-g57483a362741

Description: A use-after-free vulnerability has been identified in the Linux kernel, specifically in the binder devices list. The issue arises when devices are released without being removed from the list, allowing for potential exploitation. The vulnerability was addressed by ensuring that the device is removed from the binder devices list before being freed.

Recommendations: For Linux kernel versions prior to 6.15.0-rc7-00138-g57483a362741, update to a version that includes the fix for the use-after-free vulnerability in the binder devices list. As a temporary workaround, consider restricting access to the binder remove device function until a patch is available.

Exploit

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2025-08220

CVE-2025-38175

USN-7769-1

USN-7769-2

USN-7769-3

USN-7770-1

USN-7771-1

USN-7789-1

USN-7789-2

Affected Products

Astra Linux

Linuxmint

Linux Kernel

Ubuntu

References · 214

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38175.json · Exploit
• https://ubuntu.com/security/CVE-2025-38076 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38287 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38129 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38160 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38153 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38062 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38299 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38047 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38173 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38110 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38154 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38054 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38069 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7769-3 · Vendor Advisory