PT-2025-31088 · Linux+3 · Linux Kernel+3

Published 2025-07-11 · Updated 2025-12-15 · CVE-2025-38492

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:L/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists in netfslib when issuing subrequests. Specifically, the issue occurs between cache write completion and the setting of NETFS RREQ ALL QUEUED, potentially causing requests to hang. This can happen when asynchronous requests are used, such as in copy2cache code, where write subrequests may complete before ALL QUEUED is set, preventing the final collection and cleanup.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

BDU:2025-13516

CVE-2025-38492

USN-7879-1

USN-7879-2

USN-7879-3

USN-7879-4

USN-7880-1

USN-7934-1

Affected Products

Astra Linux

Linuxmint

Linux Kernel

Ubuntu

References · 230

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38492.json · Exploit
• https://ubuntu.com/security/CVE-2025-38612 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38515 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38666 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38664 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38473 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38526 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38507 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7879-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38351 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38585 · Vendor Advisory
• https://git.kernel.org/stable/c/110188a13c4853bd4c342e600ced4dfd26c3feb5 · Patch
• https://ubuntu.com/security/CVE-2025-38561 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38491 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38628 · Vendor Advisory