CVE-2025-38461

vsock: Fix transport_* TOCTOU

Description

In the Linux kernel, the following vulnerability has been resolved: vsock: Fix transport_* TOCTOU Transport assignment may race with module unload. Protect new_transport from becoming a stale pointer. This also takes care of an insecure call in vsock_use_local_transport(); add a lockdep assert. BUG: unable to handle page fault for address: fffffbfff8056000 Oops: Oops: 0000 [#1] SMP KASAN RIP: 0010:vsock_assign_transport+0x366/0x600 Call Trace: vsock_connect+0x59c/0xc40 __sys_connect+0xe8/0x100 __x64_sys_connect+0x6e/0xc0 do_syscall_64+0x92/0x1c0 entry_SYSCALL_64_after_hwframe+0x4b/0x53

N/A

CVSS

Severity:

EPSS 0.03%

Affected: Linux Linux

References

Link	Tags
https://git.kernel.org/stable/c/8667e8d0eb46bc54fdae30ba2f4786407d3d88eb
https://git.kernel.org/stable/c/36a439049b34cca0b3661276049b84a1f76cc21a
https://git.kernel.org/stable/c/9ce53e744f18e73059d3124070e960f3aa9902bf
https://git.kernel.org/stable/c/9d24bb6780282b0255b9929abe5e8f98007e2c6e
https://git.kernel.org/stable/c/ae2c712ba39c7007de63cb0c75b51ce1caaf1da5
https://git.kernel.org/stable/c/7b73bddf54777fb62d4d8c7729d0affe6df04477
https://git.kernel.org/stable/c/687aa0c5581b8d4aa87fd92973e4ee576b550cdf

Frequently Asked Questions

What is the severity of CVE-2025-38461?: CVE-2025-38461 has not yet been assigned a CVSS score.
How to fix CVE-2025-38461?: To fix CVE-2025-38461, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2025-38461 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2025-38461 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2025-38461?: CVE-2025-38461 affects Linux Linux, Linux Linux.

This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.