PT-2025-33774 · Linux+5 · Linux Kernel+5

Published 2025-07-26 · Updated 2026-04-20 · CVE-2025-38576

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The Linux kernel contains race conditions between the PCIe hotplug driver and the EEH driver. These race conditions can lead to kernel oopses during PCIe device unplug events, EEH driver triggers, hotplug removal triggers, PCIe tree reconfigurations, and EEH recovery steps. The EEH module has been refactored to be PCI rescan and remove safe, and minor formatting and readability issues have been addressed.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-366

Related Identifiers

AZL-66515

BDU:2025-15799

CVE-2025-38576

DLA-4328-1

ECHO-AB3F-3FFA-2D06

MGASA-2025-0234

MGASA-2025-0235

OPENSUSE-SU-2025:20081-1

SUSE-SU-2025:03272-1

SUSE-SU-2025:03290-1

SUSE-SU-2025:03301-1

SUSE-SU-2025:03382-1

SUSE-SU-2025:03602-1

SUSE-SU-2025:03633-1

SUSE-SU-2025:03634-1

SUSE-SU-2025:20653-1

SUSE-SU-2025:20669-1

SUSE-SU-2025:20739-1

SUSE-SU-2025:20756-1

SUSE-SU-2025:21074-1

SUSE-SU-2025:21139-1

SUSE-SU-2025:21179-1

SUSE-SU-2025_03272-1

SUSE-SU-2025_03290-1

SUSE-SU-2025_03301-1

SUSE-SU-2025_03382-1

USN-7879-1

USN-7879-2

USN-7879-3

USN-7879-4

USN-7880-1

USN-7909-1

USN-7909-2

USN-7909-3

USN-7909-4

USN-7909-5

USN-7910-1

USN-7910-2

USN-7933-1

USN-7934-1

USN-7938-1

USN-8028-1

USN-8028-2

USN-8028-3

USN-8028-4

USN-8028-5

USN-8028-6

USN-8028-7

USN-8028-8

USN-8031-1

USN-8031-2

USN-8031-3

USN-8052-1

USN-8052-2

USN-8074-1

USN-8074-2

USN-8126-1

Affected Products

Debian

Linuxmint

Linux Kernel

Red Os

Suse

Ubuntu

References · 3102

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38576.json · Exploit
• https://ubuntu.com/security/CVE-2025-38145 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40238 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38714 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40169 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40105 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38474 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40070 · Vendor Advisory
• https://git.kernel.org/stable/c/19d5036e7ad766cf212aebec23b9f1d7924a62bc · Patch
• https://ubuntu.com/security/CVE-2025-37828 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38090 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40127 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38117 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68222 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40281 · Vendor Advisory