GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2025-38003 (GCVE-0-2025-38003)

Vulnerability from cvelistv5 – Published: 2025-06-08 10:34 – Updated: 2026-08-05 11:58
VLAI
Title
can: bcm: add missing rcu read protection for procfs content
Summary
In the Linux kernel, the following vulnerability has been resolved: can: bcm: add missing rcu read protection for procfs content When the procfs content is generated for a bcm_op which is in the process to be removed the procfs output might show unreliable data (UAF). As the removal of bcm_op's is already implemented with rcu handling this patch adds the missing rcu_read_lock() and makes sure the list entries are properly removed under rcu protection.
Severity
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 5b48f5711f1c630841ab78dcc061de902f0e37bf , < 19f553a1ddf260da6570ed8f8d91a8c87f49b63a (git)
Affected: 85cd41070df992d3c0dfd828866fdd243d3b774a , < 659701c0b954ccdb4a916a4ad59bbc16e726d42c (git)
Affected: f34f2a18e47b73e48f90a757e1f4aaa8c7d665a1 , < 0622846db728a5332b917c797c733e202c4620ae (git)
Affected: f1b4e32aca0811aa011c76e5d6cf2fa19224b386 , < 6d7d458c41b98a5c1670cbd36f2923c37de51cf5 (git)
Affected: f1b4e32aca0811aa011c76e5d6cf2fa19224b386 , < 1f912f8484e9c4396378c39460bbea0af681f319 (git)
Affected: f1b4e32aca0811aa011c76e5d6cf2fa19224b386 , < 63567ecd99a24495208dc860d50fb17440043006 (git)
Affected: f1b4e32aca0811aa011c76e5d6cf2fa19224b386 , < 7c9db92d5f0eadca30884af75c53d601edc512ee (git)
Affected: f1b4e32aca0811aa011c76e5d6cf2fa19224b386 , < dac5e6249159ac255dad9781793dbe5908ac9ddb (git)
Affected: fbac09a3b8890003c0c55294c00709f3ae5501bb (git)
Affected: edb4baffb9483141a50fb7f7146cfe4a4c0c2db8 (git)
Affected: 5.4.205 , < 5.4.294 (semver)
Affected: 5.10.130 , < 5.10.238 (semver)
Affected: 5.15.54 , < 5.15.185 (semver)
Affected: 4.19.252 , < 4.20 (semver)
Affected: 5.18.11 , < 5.19 (semver)
guessed Create a notification for this product.
Linux Linux Affected: 5.19
Unaffected: 0 , < 5.19 (semver)
Unaffected: 5.4.294 , ≤ 5.4.* (semver)
Unaffected: 5.10.238 , ≤ 5.10.* (semver)
Unaffected: 5.15.185 , ≤ 5.15.* (semver)
Unaffected: 6.1.141 , ≤ 6.1.* (semver)
Unaffected: 6.6.93 , ≤ 6.6.* (semver)
Unaffected: 6.12.31 , ≤ 6.12.* (semver)
Unaffected: 6.14.9 , ≤ 6.14.* (semver)
Unaffected: 6.15 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T17:33:02.902Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/can/bcm.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "19f553a1ddf260da6570ed8f8d91a8c87f49b63a",
              "status": "affected",
              "version": "5b48f5711f1c630841ab78dcc061de902f0e37bf",
              "versionType": "git"
            },
            {
              "lessThan": "659701c0b954ccdb4a916a4ad59bbc16e726d42c",
              "status": "affected",
              "version": "85cd41070df992d3c0dfd828866fdd243d3b774a",
              "versionType": "git"
            },
            {
              "lessThan": "0622846db728a5332b917c797c733e202c4620ae",
              "status": "affected",
              "version": "f34f2a18e47b73e48f90a757e1f4aaa8c7d665a1",
              "versionType": "git"
            },
            {
              "lessThan": "6d7d458c41b98a5c1670cbd36f2923c37de51cf5",
              "status": "affected",
              "version": "f1b4e32aca0811aa011c76e5d6cf2fa19224b386",
              "versionType": "git"
            },
            {
              "lessThan": "1f912f8484e9c4396378c39460bbea0af681f319",
              "status": "affected",
              "version": "f1b4e32aca0811aa011c76e5d6cf2fa19224b386",
              "versionType": "git"
            },
            {
              "lessThan": "63567ecd99a24495208dc860d50fb17440043006",
              "status": "affected",
              "version": "f1b4e32aca0811aa011c76e5d6cf2fa19224b386",
              "versionType": "git"
            },
            {
              "lessThan": "7c9db92d5f0eadca30884af75c53d601edc512ee",
              "status": "affected",
              "version": "f1b4e32aca0811aa011c76e5d6cf2fa19224b386",
              "versionType": "git"
            },
            {
              "lessThan": "dac5e6249159ac255dad9781793dbe5908ac9ddb",
              "status": "affected",
              "version": "f1b4e32aca0811aa011c76e5d6cf2fa19224b386",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "fbac09a3b8890003c0c55294c00709f3ae5501bb",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "edb4baffb9483141a50fb7f7146cfe4a4c0c2db8",
              "versionType": "git"
            },
            {
              "lessThan": "5.4.294",
              "status": "affected",
              "version": "5.4.205",
              "versionType": "semver"
            },
            {
              "lessThan": "5.10.238",
              "status": "affected",
              "version": "5.10.130",
              "versionType": "semver"
            },
            {
              "lessThan": "5.15.185",
              "status": "affected",
              "version": "5.15.54",
              "versionType": "semver"
            },
            {
              "lessThan": "4.20",
              "status": "affected",
              "version": "4.19.252",
              "versionType": "semver"
            },
            {
              "lessThan": "5.19",
              "status": "affected",
              "version": "5.18.11",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/can/bcm.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.19"
            },
            {
              "lessThan": "5.19",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.294",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.238",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.185",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.141",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.93",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.31",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.14.*",
              "status": "unaffected",
              "version": "6.14.9",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.15",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.294",
                  "versionStartIncluding": "5.4.205",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.238",
                  "versionStartIncluding": "5.10.130",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.185",
                  "versionStartIncluding": "5.15.54",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.141",
                  "versionStartIncluding": "5.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.93",
                  "versionStartIncluding": "5.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.31",
                  "versionStartIncluding": "5.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.14.9",
                  "versionStartIncluding": "5.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.15",
                  "versionStartIncluding": "5.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.19.252",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "5.18.11",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncan: bcm: add missing rcu read protection for procfs content\n\nWhen the procfs content is generated for a bcm_op which is in the process\nto be removed the procfs output might show unreliable data (UAF).\n\nAs the removal of bcm_op\u0027s is already implemented with rcu handling this\npatch adds the missing rcu_read_lock() and makes sure the list entries\nare properly removed under rcu protection."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - Exploitation requires a local account to open a PF_CAN/CAN_BCM socket, issue RX_SETUP/RX_DELETE via sendmsg(), and read /proc/net/can-bcm/\u003cinode\u003e. No remote or adjacent network path reaches the racing procfs reader.\nAC:L - The attacker controls both sides of the race entirely \u2014 one thread loops reading the procfs entry while another loops RX_SETUP/RX_DELETE \u2014 and bcm_proc_show() held no lock whatsoever against the deleter, so the window is hit reliably by simple repetition; a working PoC was produced by the reporter for this bcm series.\nPR:L - can_create() performs no capability check, connect() with ifindex 0 needs no CAN device, and the created proc entry is mode 0644, so any unprivileged local user can drive the whole sequence in its own process (module autoload of can/can-bcm is also unprivileged).\nUI:N - The attacker performs every step itself \u2014 socket setup, op deletion, and reading its own procfs file \u2014 with no action by any other user.\nS:U - The freed object, the disclosure, and the crash are all within the kernel\u0027s own security authority; no VM, IOMMU, or sandbox boundary is crossed.\nC:H - Fields are read from a freed bcm_op and formatted directly into world-readable procfs output; since bcm_op lands in the sprayable kmalloc-512 cache, an attacker reclaiming it controls the list cursor and can steer the walk to arbitrary kernel addresses, leaking their contents to userspace.\nI:H - This is a use-after-free on an attacker-reclaimable slab object whose linkage pointers are dereferenced after free, a primitive that combined with heap grooming is leveraged for kernel state corruption and control-flow influence.\nA:H - A concurrent plain list_del() leaves LIST_POISON1 in the cursor, so the unprotected walker dereferences a non-canonical/freed pointer and oopses; the walk can also spin over reclaimed memory or hit a divide-by-zero on a re-read frames_abs, crashing or hanging the kernel."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T11:58:54.550Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/19f553a1ddf260da6570ed8f8d91a8c87f49b63a"
        },
        {
          "url": "https://git.kernel.org/stable/c/659701c0b954ccdb4a916a4ad59bbc16e726d42c"
        },
        {
          "url": "https://git.kernel.org/stable/c/0622846db728a5332b917c797c733e202c4620ae"
        },
        {
          "url": "https://git.kernel.org/stable/c/6d7d458c41b98a5c1670cbd36f2923c37de51cf5"
        },
        {
          "url": "https://git.kernel.org/stable/c/1f912f8484e9c4396378c39460bbea0af681f319"
        },
        {
          "url": "https://git.kernel.org/stable/c/63567ecd99a24495208dc860d50fb17440043006"
        },
        {
          "url": "https://git.kernel.org/stable/c/7c9db92d5f0eadca30884af75c53d601edc512ee"
        },
        {
          "url": "https://git.kernel.org/stable/c/dac5e6249159ac255dad9781793dbe5908ac9ddb"
        }
      ],
      "title": "can: bcm: add missing rcu read protection for procfs content",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2025-38003",
    "datePublished": "2025-06-08T10:34:55.808Z",
    "dateReserved": "2025-04-16T04:51:23.977Z",
    "dateUpdated": "2026-08-05T11:58:54.550Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2025-38003",
      "date": "2026-09-16",
      "epss": "0.00249",
      "percentile": "0.16415"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2025-38003\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2025-06-08T11:15:20.990\",\"lastModified\":\"2026-07-30T06:22:43.890\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\ncan: bcm: add missing rcu read protection for procfs content\\n\\nWhen the procfs content is generated for a bcm_op which is in the process\\nto be removed the procfs output might show unreliable data (UAF).\\n\\nAs the removal of bcm_op\u0027s is already implemented with rcu handling this\\npatch adds the missing rcu_read_lock() and makes sure the list entries\\nare properly removed under rcu protection.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: can: bcm: a\u00f1adir protecci\u00f3n de lectura rcu faltante para el contenido de procfs. Cuando se genera el contenido de procfs para un bcm_op que se va a eliminar, la salida de procfs podr\u00eda mostrar datos no fiables (UAF). Dado que la eliminaci\u00f3n de bcm_op ya est\u00e1 implementada con la gesti\u00f3n de rcu, este parche a\u00f1ade el rcu_read_lock() faltante y garantiza que las entradas de la lista se eliminen correctamente bajo la protecci\u00f3n de rcu.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"net/can/bcm.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"5b48f5711f1c630841ab78dcc061de902f0e37bf\",\"lessThan\":\"19f553a1ddf260da6570ed8f8d91a8c87f49b63a\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"85cd41070df992d3c0dfd828866fdd243d3b774a\",\"lessThan\":\"659701c0b954ccdb4a916a4ad59bbc16e726d42c\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"f34f2a18e47b73e48f90a757e1f4aaa8c7d665a1\",\"lessThan\":\"0622846db728a5332b917c797c733e202c4620ae\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"f1b4e32aca0811aa011c76e5d6cf2fa19224b386\",\"lessThan\":\"6d7d458c41b98a5c1670cbd36f2923c37de51cf5\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"f1b4e32aca0811aa011c76e5d6cf2fa19224b386\",\"lessThan\":\"1f912f8484e9c4396378c39460bbea0af681f319\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"f1b4e32aca0811aa011c76e5d6cf2fa19224b386\",\"lessThan\":\"63567ecd99a24495208dc860d50fb17440043006\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"f1b4e32aca0811aa011c76e5d6cf2fa19224b386\",\"lessThan\":\"7c9db92d5f0eadca30884af75c53d601edc512ee\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"f1b4e32aca0811aa011c76e5d6cf2fa19224b386\",\"lessThan\":\"dac5e6249159ac255dad9781793dbe5908ac9ddb\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"fbac09a3b8890003c0c55294c00709f3ae5501bb\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"edb4baffb9483141a50fb7f7146cfe4a4c0c2db8\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"5.4.205\",\"lessThan\":\"5.4.294\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"5.10.130\",\"lessThan\":\"5.10.238\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"5.15.54\",\"lessThan\":\"5.15.185\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"4.19.252\",\"lessThan\":\"4.20\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"5.18.11\",\"lessThan\":\"5.19\",\"versionType\":\"semver\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"net/can/bcm.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"5.19\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"5.19\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.4.294\",\"lessThanOrEqual\":\"5.4.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.238\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.185\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.141\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.93\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.31\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.14.9\",\"lessThanOrEqual\":\"6.14.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.15\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.19.252\",\"versionEndExcluding\":\"4.20\",\"matchCriteriaId\":\"4FFB63B8-DE90-4280-8F53-56BFA5663F03\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.4.205\",\"versionEndExcluding\":\"5.4.294\",\"matchCriteriaId\":\"A9A79DE1-6FCD-4E39-8B8F-3192A07A7410\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.10.130\",\"versionEndExcluding\":\"5.10.238\",\"matchCriteriaId\":\"D8C41DB5-D542-4AB7-AFAE-5BBE6D04D2B4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.15.54\",\"versionEndExcluding\":\"5.15.185\",\"matchCriteriaId\":\"F0290147-DDEA-430B-AE17-DA6E83B50129\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.18.11\",\"versionEndExcluding\":\"5.19\",\"matchCriteriaId\":\"3F904485-FC3F-4533-8CD9-B8208F0C4707\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.19.1\",\"versionEndExcluding\":\"6.1.141\",\"matchCriteriaId\":\"934CFCAC-D417-4076-9C80-A157ABC8E115\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.6.93\",\"matchCriteriaId\":\"50A4A9DE-24AB-4FB4-AACD-85D8EABB0571\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7\",\"versionEndExcluding\":\"6.12.31\",\"matchCriteriaId\":\"1AE98841-5774-4B45-A81C-2D188DB7E5C3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.13\",\"versionEndExcluding\":\"6.14.9\",\"matchCriteriaId\":\"A9B72DD1-715C-4101-A720-1C8D70044C06\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:5.19:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"9D759CCF-9E1B-41B2-81AA-CB580C5F3EEC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:5.19:rc6:*:*:*:*:*:*\",\"matchCriteriaId\":\"00AE778B-BAEE-49EB-9F84-003B73D7862A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:5.19:rc7:*:*:*:*:*:*\",\"matchCriteriaId\":\"C178431E-AD82-4B3D-B70F-A273A02ABD5D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:5.19:rc8:*:*:*:*:*:*\",\"matchCriteriaId\":\"2CF5D19C-C418-4B57-B52D-7795547F4096\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"8D465631-2980-487A-8E65-40AE2B9F8ED1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.15:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"4C9D071F-B28E-46EC-AC61-22B913390211\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.15:rc3:*:*:*:*:*:*\",\"matchCriteriaId\":\"13FC0DDE-E513-465E-9E81-515702D49B74\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.15:rc4:*:*:*:*:*:*\",\"matchCriteriaId\":\"8C7B5B0E-4EEB-48F5-B4CF-0935A7633845\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.15:rc5:*:*:*:*:*:*\",\"matchCriteriaId\":\"2D240580-3048-49B2-9E27-F115A9DF8224\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.15:rc6:*:*:*:*:*:*\",\"matchCriteriaId\":\"90320558-E553-4EF5-8A0B-0F5D20113BD2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.15:rc7:*:*:*:*:*:*\",\"matchCriteriaId\":\"C300BA32-5854-4B59-A00A-18A402F291D0\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FA6FEEC2-9F11-4643-8827-749718254FED\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/0622846db728a5332b917c797c733e202c4620ae\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/19f553a1ddf260da6570ed8f8d91a8c87f49b63a\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/1f912f8484e9c4396378c39460bbea0af681f319\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/63567ecd99a24495208dc860d50fb17440043006\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/659701c0b954ccdb4a916a4ad59bbc16e726d42c\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/6d7d458c41b98a5c1670cbd36f2923c37de51cf5\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/7c9db92d5f0eadca30884af75c53d601edc512ee\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/dac5e6249159ac255dad9781793dbe5908ac9ddb\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-07-30T09:17:48+00:00",
      "cve": "CVE-2025-38003",
      "id": "CVE-2025-38003",
      "initial_release_date": "2025-06-08T00:00:00+00:00",
      "product_status:known_affected": "226",
      "product_status:known_not_affected": "48",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: can: bcm: add missing rcu read protection for procfs content",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-38003.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-12T16:50:12Z",
      "cve": "CVE-2025-38003",
      "id": "CVE-2025-38003",
      "initial_release_date": "2025-06-09T01:26:56Z",
      "product_status:known_affected": "522",
      "product_status:known_not_affected": "299",
      "product_status:recommended": "396",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2025-38003",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2025-38003.json",
      "version": "38"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.