THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2025-38352 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() If an exiting non-autoreaping task has already passed exit_notify() and calls handle_posix_cpu_timers() from IRQ, it can be

[NVD] CVE-2025-38352 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() If an exiting non-autoreaping task has already passed exit_notify() and calls handle_posix_cpu_timers() from IRQ, it can be

lownvdPublished 2025-07-22

CVE-2025-38352 CVSS: 7.8 HIGH Published: 2025-07-22T08:15:23.577

In the Linux kernel, the following vulnerability has been resolved:

posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()

If an exiting non-autoreaping task has already passed exit_notify() and calls handle_posix_cpu_timers() from IRQ, it can be reaped by its parent or debugger right after unlock_t

Indicators of compromise

CVE-2025-38352cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2025-38352