PT-2025-30783 · Linux+3 · Linux Kernel+3

CVE-2025-38383 · Published 2025-07-25 · Updated 2026-02-13

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A data race was identified in the show numa info() function within the vmalloc.c file. The issue stems from concurrent read and write access to m->private by multiple CPUs, leading to a potential data corruption scenario. The vulnerability occurs during the execution of vmalloc info show(), seq read iter(), and proc reg read iter().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Race Condition

Allocation of Resources Without Limits

Weakness Enumeration

CWE-362

CWE-770

Related Identifiers

ALSA-2026:1178

BDU:2025-10803

CVE-2025-38383

OESA-2026-1337

OESA-2026-1338

OESA-2026-1339

OPENSUSE-SU-2025:20081-1

RHSA-2026:1178

RHSA-2026:2761

SUSE-SU-2025:21074-1

SUSE-SU-2025:21139-1

SUSE-SU-2025:21179-1

SUSE-SU-2026:20560-1

USN-7833-1

USN-7833-2

USN-7833-3

USN-7833-4

USN-7834-1

USN-7856-1

Affected Products

Linuxmint

Linux Kernel

Suse

Ubuntu

References · 1495

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38383.json · Exploit
• https://ubuntu.com/security/CVE-2025-38233 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38251 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-40105 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-39744 · Security Note
• https://ubuntu.com/security/CVE-2025-38241 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38381 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7833-4 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38355 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38332 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38386 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-38685 · Security Note
• https://ubuntu.com/security/CVE-2025-38361 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-38383 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38392 · Vendor Advisory