PT-2025-28870 · Linux+5 · Linux Kernel+5

Barry · Published 2025-06-04 · Updated 2026-04-20 · CVE-2025-38242

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The Linux kernel contains a race condition within the userfaultfd move function when handling swap cache operations. This issue arises from a lockless swap cache lookup, potentially leading to the movement of an incorrect folio or corruption of the RSS counter. The vulnerability occurs when a folio is swapped in and out using the same swap entry concurrently with a userfaultfd move operation. Specifically, the filemap get folio function may return an incorrect folio or NULL, leading to the potential for moving an invalid folio or accounting errors. The race window is narrow, requiring multiple rare event collisions, but can be reproduced with a deliberately constructed reproducer.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Allocation of Resources Without Limits

Race Condition

Weakness Enumeration

CWE-770

CWE-362

Related Identifiers

BDU:2025-09166

CVE-2025-38242

OPENSUSE-SU-2025:20081-1

SUSE-SU-2025:21074-1

SUSE-SU-2025:21139-1

SUSE-SU-2025:21179-1

USN-7833-1

USN-7833-2

USN-7833-3

USN-7833-4

USN-7834-1

USN-7856-1

Affected Products

Astra Linux

Linuxmint

Linux Kernel

Red Os

Suse

Ubuntu

References · 1468

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38242.json · Exploit
• https://ubuntu.com/security/CVE-2025-38090 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38355 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-36350 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38257 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38227 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38411 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38214 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38431 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38338 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38242 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38236 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38342 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38395 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38435 · Vendor Advisory