PT-2025-29026 · Linux+5 · Linux Kernel+5

Published

2025-07-10

·

Updated

2026-03-13

·

CVE-2025-38306

CVSS v3.1

4.7

Medium

VectorAV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)
Description: A race condition exists in the has locked children() function within the fs/fhandle.c file of the Linux kernel. The may decode fh() function calls has locked children() without acquiring the necessary locks, potentially leading to a system failure. The issue is addressed by renaming the existing has locked children() to has locked children(), making it static, and modifying the callers in fs/namespace.c to use the new function. The has locked children() function is then implemented as a wrapper around has locked children(), invoking the latter under read seqlock excl(&mount lock).
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Race Condition

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2025-10738
CVE-2025-38306
DSA-6008-1
OPENSUSE-SU-2025:20081-1
SUSE-SU-2025:21074-1
SUSE-SU-2025:21139-1
SUSE-SU-2025:21179-1
USN-7769-1
USN-7769-2
USN-7769-3
USN-7770-1
USN-7771-1
USN-7789-1
USN-7789-2

Affected Products

Astra Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu