In the Linux kernel, the following vulnerability has been resolved: net/packet: fix a race in packet_set_ring() and packet_notifier() When packet_set_ring() releases po->bind_lock, another thread can run packet_notifier() and process an NETDEV_UP event. This race and the fix are both similar to that of commit 15fe076edea7 ("net/packet: fix a race in packet_bind() and packet_notifier()"). There too the packet_notifier NETDEV_UP event managed to run while a po->bind_lock critical section had to be temporarily released. And the fix was similarly to temporarily set po->num to zero to keep the socket unhooked until the lock is retaken. The po->bind_lock in packet_set_ring and packet_notifier precede the introduction of git history.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

No data.

No data.

References
Link Providers
https://git.kernel.org/stable/c/01d3c8417b9c1b884a8a981a3b886da556512f36 cve-icon cve-icon
https://git.kernel.org/stable/c/7de07705007c7e34995a5599aaab1d23e762d7ca cve-icon cve-icon
https://git.kernel.org/stable/c/88caf46db8239e6471413d28aabaa6b8bd552805 cve-icon cve-icon
https://git.kernel.org/stable/c/e50ccfaca9e3c671cae917dcb994831a859cf588 cve-icon cve-icon
https://git.kernel.org/stable/c/f1791fd7b845bea0ce9674fcf2febee7bc87a893 cve-icon cve-icon
https://git.kernel.org/stable/c/f2e8fcfd2b1bc754920108b7f2cd75082c5a18df cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025082213-CVE-2025-38617-1e47@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-38617 cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-38617 cve-icon
History

Sat, 23 Aug 2025 11:00:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Vendors & Products Linux
Linux linux Kernel

Sat, 23 Aug 2025 00:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-366
References
Metrics threat_severity

None

 cvssV3_1

{'score': 7.0, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}

threat_severity

Moderate

Fri, 22 Aug 2025 13:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: net/packet: fix a race in packet_set_ring() and packet_notifier() When packet_set_ring() releases po->bind_lock, another thread can run packet_notifier() and process an NETDEV_UP event. This race and the fix are both similar to that of commit 15fe076edea7 ("net/packet: fix a race in packet_bind() and packet_notifier()"). There too the packet_notifier NETDEV_UP event managed to run while a po->bind_lock critical section had to be temporarily released. And the fix was similarly to temporarily set po->num to zero to keep the socket unhooked until the lock is retaken. The po->bind_lock in packet_set_ring and packet_notifier precede the introduction of git history.
Title net/packet: fix a race in packet_set_ring() and packet_notifier()
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-08-22T13:01:23.963Z

Updated: 2025-08-22T13:01:23.963Z

Reserved: 2025-04-16T04:51:24.029Z

Link: CVE-2025-38617

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-08-22T14:15:46.160

Modified: 2025-08-22T18:08:51.663

Link: CVE-2025-38617

cve-icon Redhat

Severity : Moderate

Publid Date: 2025-08-22T00:00:00Z

Links: CVE-2025-38617 - Bugzilla