PT-2025-30785 · Linux+5 · Linux Kernel+5

Published 2025-01-01 · Updated 2026-04-20 · CVE-2025-38385

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.16.0-rc2-00624-ge926949dab03

Description A warning may be triggered in netif napi del locked() during USB device disconnect due to a redundant call to netif napi del() in the disconnect path. This occurs while NAPI is still enabled, but is unnecessary as unregister netdev() handles NAPI teardown safely. Removing the redundant call avoids triggering the warning.

Recommendations Update to Linux kernel version 6.16.0-rc2-00624-ge926949dab03 or a later version to resolve this issue.

Exploit

Fix

Improper Resource Release

Weakness Enumeration

CWE-371

CWE-404

Related Identifiers

AZL-65744

BDU:2025-10802

CVE-2025-38385

DLA-4328-1

DSA-5973-1

ECHO-4777-5B4F-7796

MGASA-2025-0218

MGASA-2025-0219

OESA-2025-1959

OESA-2025-1960

OESA-2025-1961

OPENSUSE-SU-2025:20081-1

SUSE-SU-2025:02853-1

SUSE-SU-2025:02923-1

SUSE-SU-2025:02969-1

SUSE-SU-2025:02996-1

SUSE-SU-2025:02997-1

SUSE-SU-2025:03011-1

SUSE-SU-2025:03023-1

SUSE-SU-2025:20577-1

SUSE-SU-2025:20586-1

SUSE-SU-2025:20601-1

SUSE-SU-2025:20602-1

SUSE-SU-2025:21074-1

SUSE-SU-2025:21139-1

SUSE-SU-2025:21179-1

SUSE-SU-2025_02853-1

SUSE-SU-2025_02969-1

SUSE-SU-2025_02996-1

SUSE-SU-2025_02997-1

SUSE-SU-2025_03011-1

SUSE-SU-2025_03023-1

USN-7833-1

USN-7833-2

USN-7833-3

USN-7833-4

USN-7834-1

USN-7856-1

USN-8028-1

USN-8028-2

USN-8028-3

USN-8028-4

USN-8028-5

USN-8028-6

USN-8028-7

USN-8028-8

USN-8031-1

USN-8031-2

USN-8031-3

USN-8052-1

USN-8052-2

USN-8074-1

USN-8074-2

USN-8126-1

Affected Products

Debian

Linuxmint

Linux Kernel

Red Os

Suse

Ubuntu

References · 3248

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38385.json · Exploit
• https://ubuntu.com/security/CVE-2025-38145 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40238 · Vendor Advisory
• https://git.kernel.org/stable/c/17a37b9a5dd945d86110838fb471e7139ba993a2 · Patch
• https://ubuntu.com/security/CVE-2025-38714 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40169 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40105 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40070 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38474 · Vendor Advisory
• https://git.kernel.org/stable/c/968a419c95131e420f12bbdba19e96e2f6b071c4 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-37957 · Security Note
• https://ubuntu.com/security/CVE-2025-37828 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38090 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40127 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38117 · Vendor Advisory