CVE-2025-38717

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition was identified in the kcm unattach() function within the kernel's networking subsystem. Specifically, the function lacked a check of the kcm->tx stopped flag before calling queue work(). This could lead to a situation where kcm unattach() is executed concurrently with kcm release(), potentially requeuing kcm->tx work immediately before the kcm structure is freed in kcm done(). The issue was discovered by syzbot.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.