Severity
Medium
Analysis Summary
CVE-2025-38236 CVSS:4
In the Linux kernel, the following vulnerability has been resolved: af_unix: Don't leave consecutive consumed OOB skbs. Jann Horn reported a use-after-free in unix_stream_read_generic(). The following sequences reproduce the issue: $ python3 from socket import * s1, s2 = socketpair(AF_UNIX, SOCK_STREAM) s1.send(b'x', MSG_OOB) s2.recv(1, MSG_OOB) # leave a consumed OOB skb s1.send(b'y', MSG_OOB) s2.recv(1, MSG_OOB) # leave a consumed OOB skb s1.send(b'z', MSG_OOB) s2.recv(1) # recv 'z' illegally s2.recv(1, MSG_OOB) # access 'z' skb (use-after-free).
CVE-2025-38497 CVSS:6.2
Linux Kernel is vulnerable to a denial of service, caused by an out-of-bounds read in usb: gadget: configfs.
Impact
- Privileges Escalation
- Denial of Service
Indicators of Compromise
CVE
CVE-2025-38236
CVE-2025-38497
Affected Vendors
Affected Products
- Linux kernel versions 6.9 and above
Remediation
Upgrade to the latest version of the Linux Kernel, available from the Linux Kernel GIT Repository.