CVE-2025-38462

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a time-of-check-to-time-of-use (TOCTOU) issue within the vsock subsystem. Specifically, vsock find cid() and vsock dev do ioctl() may experience a race condition during module unloading, potentially leading to a null pointer dereference. The issue is addressed by introducing vsock transport local cid() to protect against this potential dereference.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.