PT-2025-34364 · Linux+5 · Linux Kernel+5

Published 2025-01-01 · Updated 2026-05-26 · CVE-2025-38618

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: A flaw exists in the vsock subsystem that allows a vsock to autobind to VMADDR PORT ANY. This can lead to a use-after-free issue when a connection is established to the bound socket, as the socket returned by accept() has port VMADDR PORT ANY but is not on the list of unbound sockets. Binding it results in an extra reference count decrement.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ASB-A-439253642

AZL-66593

AZL-73614

BDU:2025-15180

CVE-2025-38618

DLA-4327-1

DLA-4328-1

ECHO-315E-A07B-6938

MGASA-2025-0234

MGASA-2025-0235

OESA-2026-1306

OESA-2026-1341

OPENSUSE-SU-2025:20081-1

SUSE-SU-2025:03204-1

SUSE-SU-2025:03272-1

SUSE-SU-2025:03283-1

SUSE-SU-2025:03290-1

SUSE-SU-2025:03301-1

SUSE-SU-2025:03310-1

SUSE-SU-2025:03314-1

SUSE-SU-2025:03344-1

SUSE-SU-2025:03382-1

SUSE-SU-2025:03383-1

SUSE-SU-2025:03384-1

SUSE-SU-2025:03602-1

SUSE-SU-2025:03633-1

SUSE-SU-2025:03634-1

SUSE-SU-2025:20653-1

SUSE-SU-2025:20669-1

SUSE-SU-2025:20739-1

SUSE-SU-2025:20756-1

SUSE-SU-2025:20939-1

SUSE-SU-2025:20940-1

SUSE-SU-2025:20941-1

SUSE-SU-2025:20942-1

SUSE-SU-2025:20943-1

SUSE-SU-2025:20944-1

SUSE-SU-2025:20945-1

SUSE-SU-2025:20946-1

SUSE-SU-2025:20947-1

SUSE-SU-2025:20949-1

SUSE-SU-2025:20950-1

SUSE-SU-2025:20951-1

SUSE-SU-2025:20952-1

SUSE-SU-2025:20953-1

SUSE-SU-2025:20955-1

SUSE-SU-2025:20956-1

SUSE-SU-2025:20957-1

SUSE-SU-2025:20959-1

SUSE-SU-2025:20960-1

SUSE-SU-2025:20972-1

SUSE-SU-2025:20973-1

SUSE-SU-2025:20974-1

SUSE-SU-2025:20975-1

SUSE-SU-2025:20977-1

SUSE-SU-2025:20978-1

SUSE-SU-2025:20980-1

SUSE-SU-2025:20981-1

SUSE-SU-2025:20982-1

SUSE-SU-2025:20983-1

SUSE-SU-2025:20984-1

SUSE-SU-2025:20985-1

SUSE-SU-2025:20986-1

SUSE-SU-2025:20987-1

SUSE-SU-2025:20988-1

SUSE-SU-2025:20989-1

SUSE-SU-2025:20991-1

SUSE-SU-2025:21074-1

SUSE-SU-2025:21139-1

SUSE-SU-2025:21179-1

SUSE-SU-2025:3878-1

SUSE-SU-2025:3880-1

SUSE-SU-2025:3886-1

SUSE-SU-2025:3888-1

SUSE-SU-2025:3892-1

SUSE-SU-2025:3927-1

SUSE-SU-2025:3932-1

SUSE-SU-2025:3935-1

SUSE-SU-2025:3936-1

SUSE-SU-2025:3983-1

SUSE-SU-2025:3987-1

SUSE-SU-2025:3995-1

SUSE-SU-2025:4000-1

SUSE-SU-2025:4001-1

SUSE-SU-2025:4016-1

SUSE-SU-2025:4024-1

SUSE-SU-2025:4031-1

SUSE-SU-2025:4036-1

SUSE-SU-2025:4040-1

SUSE-SU-2025:4043-1

SUSE-SU-2025:4046-1

SUSE-SU-2025:4050-1

SUSE-SU-2025:4056-1

SUSE-SU-2025:4058-1

SUSE-SU-2025:4059-1

SUSE-SU-2025:4062-1

SUSE-SU-2025:4063-1

SUSE-SU-2025:4064-1

SUSE-SU-2025:4078-1

SUSE-SU-2025:4123-1

SUSE-SU-2025_03204-1

SUSE-SU-2025_03272-1

SUSE-SU-2025_03290-1

SUSE-SU-2025_03301-1

SUSE-SU-2025_03310-1

SUSE-SU-2025_03314-1

SUSE-SU-2025_03344-1

SUSE-SU-2025_03382-1

SUSE-SU-2026:20149-1

SUSE-SU-2026:20164-1

SUSE-SU-2026:20169-1

USN-7791-1

USN-7791-2

USN-7791-3

USN-7791-4

USN-7792-1

USN-7792-2

USN-7792-3

USN-7793-1

USN-7793-2

USN-7793-3

USN-7793-4

USN-7793-5

USN-7795-1

USN-7795-2

USN-7795-3

USN-7795-4

USN-7795-5

USN-7796-1

USN-7796-2

USN-7796-3

USN-7796-4

USN-7797-1

USN-7797-2

USN-7797-3

USN-7798-1

USN-7799-1

USN-7800-1

USN-7801-1

USN-7801-2

USN-7801-3

USN-7808-1

USN-7808-2

USN-7809-1

USN-7810-1

USN-7810-2

USN-7810-3

USN-7811-1

USN-7819-1

USN-7819-2

USN-7820-1

USN-7821-1

USN-7854-1

USN-7865-1

USN-7875-1

USN-7933-1

Affected Products

Debian

Linuxmint

Linux Kernel

Red Os

Suse

Ubuntu

References · 2661

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38618.json · Exploit
• 🔥 https://github.com/hexfoureight/security-research/tree/CVE-2025-38618_lts_cos/pocs/linux/kernelctf/CVE-2025-38618_lts_cos · Exploit
• https://ubuntu.com/security/CVE-2024-38541 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-54317 · Security Note
• https://ubuntu.com/security/CVE-2025-38576 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-38068 · Security Note
• https://ubuntu.com/security/CVE-2025-38083 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39734 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23038 · Security Note
• https://osv.dev/vulnerability/USN-7793-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39795 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-4328-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:4058-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21917 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:4062-1 · Vendor Advisory