CVE-2025-38236: Linux Kernel Android Package Vulnerability Leading to Local Privilege Escalation
Summary
CVE-2025-38236: In unix_stream_recv_urg of af_unix.c, there is a possible way to achieve code execution due to a use after free. Affects :linux_kernel: versions >= :0, < :2025-12-05. Fixed in :2025-12-05. How to fix ↓
Also tracked for
- linux · Debian:12
The same CVE-2025-38236 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux Kernel is the core component of the Android operating system, responsible for managing hardware resources and providing essential services to applications. It is designed for performance, security, and stability, making it a critical element in the Android ecosystem. However, vulnerabilities within the kernel can lead to severe security risks, including unauthorized access and privilege escalation.
Vulnerability Detail
In the unix_stream_recv_urg function of af_unix.c, a use-after-free vulnerability exists that may allow an attacker to execute arbitrary code. This vulnerability can lead to local privilege escalation without requiring additional execution privileges. The flaw arises from improper memory management, which can be exploited by malicious actors to gain elevated access to system resources.
How To Fix
Minimum fixed version
:2025-12-05
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds available to mitigate this vulnerability other than applying the patch as soon as it is released.
Conclusion
The CVE-2025-38236 vulnerability in the Linux Kernel for Android presents a significant risk of local privilege escalation due to a use-after-free issue. Users are strongly advised to update their systems to the patched version as soon as it becomes available to mitigate this risk.
See every vulnerability recorded for :linux_kernel: →
FAQ
CVE-2025-38236 is a vulnerability in the Linux Kernel affecting Android systems, which allows for local privilege escalation due to a use-after-free error.
You can check if your application is affected by using the Vulert playground at Vulert Scanner, which monitors open-source vulnerabilities without requiring signup.
Exploitation of this vulnerability could allow an attacker to execute arbitrary code with elevated privileges, potentially compromising the entire system.
No, user interaction is not needed for exploitation, making it particularly dangerous.
While there are no specific workarounds, it is crucial to prioritize applying the patch once available to protect your system from potential exploitation.
Related vulnerabilities
Recent vulnerabilities recorded for :linux_kernel:.
