Analysis Summary

CVE-2025-38236 CVSS:4

In the Linux kernel, the following vulnerability has been resolved: af_unix: Don't leave consecutive consumed OOB skbs. Jann Horn reported a use-after-free in unix_stream_read_generic(). The following sequences reproduce the issue: $ python3 from socket import * s1, s2 = socketpair(AF_UNIX, SOCK_STREAM) s1.send(b'x', MSG_OOB) s2.recv(1, MSG_OOB) # leave a consumed OOB skb s1.send(b'y', MSG_OOB) s2.recv(1, MSG_OOB) # leave a consumed OOB skb s1.send(b'z', MSG_OOB) s2.recv(1) # recv 'z' illegally s2.recv(1, MSG_OOB) # access 'z' skb (use-after-free).

CVE-2025-38497 CVSS:6.2

Linux Kernel is vulnerable to a denial of service, caused by an out-of-bounds read in usb: gadget: configfs.

Impact

• Privileges Escalation
• Denial of Service

Indicators of Compromise

CVE

• CVE-2025-38236

• CVE-2025-38497

Affected Vendors

Remediation

Upgrade to the latest version of the Linux Kernel, available from the Linux Kernel GIT Repository.

CVE-2025-38236

CVE-2025-38497