SB2025082884 - Improper locking in Linux kernel packet
Published: August 28, 2025
Security Bulletin ID
SB2025082884
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Improper locking (CVE-ID: CVE-2025-38617)
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to improper locking within the packet_set_ring() function in net/packet/af_packet.c. A local user can perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/01d3c8417b9c1b884a8a981a3b886da556512f36
- https://git.kernel.org/stable/c/7de07705007c7e34995a5599aaab1d23e762d7ca
- https://git.kernel.org/stable/c/88caf46db8239e6471413d28aabaa6b8bd552805
- https://git.kernel.org/stable/c/e50ccfaca9e3c671cae917dcb994831a859cf588
- https://git.kernel.org/stable/c/f1791fd7b845bea0ce9674fcf2febee7bc87a893
- https://git.kernel.org/stable/c/f2e8fcfd2b1bc754920108b7f2cd75082c5a18df