CVE-2025-38393

Katalog CVE

CVSS 4.7 · Medium EPSS 0,35%

Kerentanan Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') pada linux kernel, debian linux. Skor CVSS 3.1 4.7 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN We found a few different systems hung up in writeback waiting on the same page lock, and one task waiting on the NFS_LAYOUT_DRAIN bit in pnfs_update_layout(), however the pnfs_layout_hdr's plh_outstanding count was zero. It seems most likely that this is another race between the waiter and waker similar to commit ed0172af5d6f ("SUNRPC: Fix a race to wake a sync task"). Fix it up by applying the advised barrier.

Rincian

Terbit di NVD

25 Juli 2025

Terakhir diubah

30 Juli 2026

Status NVD

Modified

CVSS 3.1

4.7 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

EPSS (30 hari)

0,35% peluang dieksploitasi; lebih tinggi dari 27,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/08287df60bac5b008b6bcdb03053988335d3d282 patch
• https://git.kernel.org/stable/c/1f4da20080718f258e189a2c5f515385fa393da6 patch
• https://git.kernel.org/stable/c/864a54c1243ed3ca60baa4bc492dede1361f4c83 patch
• https://git.kernel.org/stable/c/8846fd02c98da8b79e6343a20e6071be6f372180 patch
• https://git.kernel.org/stable/c/8ca65fa71024a1767a59ffbc6a6e2278af84735e patch
• https://git.kernel.org/stable/c/c01776287414ca43412d1319d2877cbad65444ac patch
• https://git.kernel.org/stable/c/e4b13885e7ef1e64e45268feef1e5f0707c47e72 patch
• https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html advisory pihak ketiga
• https://cert-portal.siemens.com/productcert/html/ssa-082556.html