CVE-2025-38616: Linux Kernel Use After Free Vulnerability in Android
Summary
CVE-2025-38616: In multiple locations, there is a possible use after free due to a race condition. Affects :linux_kernel: versions >= :0, < :2026-03-05. Fixed in :2026-03-05. How to fix ↓
Also tracked for
- linux · Debian:12
The same CVE-2025-38616 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Android operating system, responsible for managing hardware resources and providing essential services to applications. It is designed for performance, security, and stability. However, vulnerabilities can arise due to complex interactions within the kernel, leading to potential security risks. This specific vulnerability, identified as CVE-2025-38616, affects multiple locations within the kernel, allowing for a possible use after free condition due to a race condition.
Vulnerability Detail
CVE-2025-38616 is a high-severity vulnerability that arises from a race condition in the Linux kernel, leading to a use after free scenario. This flaw allows an attacker to escalate privileges locally without requiring additional execution privileges. The vulnerability is particularly concerning as it can be exploited without user interaction, making it a significant risk for systems running affected versions of the kernel.
How To Fix
Minimum fixed version
:2026-03-05
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds available for this vulnerability other than applying the patch once it is released. Users are advised to monitor their systems and apply updates as soon as they become available.
Conclusion
CVE-2025-38616 is a critical vulnerability in the Linux kernel affecting Android systems, allowing for potential local privilege escalation due to a use after free condition. Users are urged to update their systems to the patched version as soon as it becomes available to mitigate risks.
See every vulnerability recorded for :linux_kernel: →
FAQ
CVE-2025-38616 is a vulnerability in the Linux kernel that allows for a use after free condition due to a race condition, potentially leading to local privilege escalation.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities. Visit Vulert Scanner to check if your application is affected by this vulnerability.
The primary risk is local privilege escalation, which could allow an attacker to gain unauthorized access to system resources and sensitive information.
No, user interaction is not needed for exploitation, making it particularly dangerous.
The patch for this vulnerability is expected to be available on March 5, 2026.
Related vulnerabilities
Recent vulnerabilities recorded for :linux_kernel:.
