Critical Security Update for Kernel Package: Addressing CVE-2025-38352
Summary
ALSA-2025:15662: Important: kernel security update. Affects kernel versions < 6.12.0-55.32.1.el10_0. Fixed in 6.12.0-55.32.1.el10_0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The kernel package is a fundamental component of the Linux operating system, serving as the core interface between the hardware and software. It manages system resources, hardware communication, and provides essential services for all other software. The kernel is crucial for system stability and performance, making its security paramount. This specific vulnerability, CVE-2025-38352, exposes the kernel to potential race conditions, which can lead to unpredictable behavior and security breaches.
Vulnerability Detail
The vulnerability identified as CVE-2025-38352 arises from a race condition between the functions handle_posix_cpu_timers() and posix_cpu_timer_del() within the kernel's posix-cpu-timers subsystem. This flaw can be exploited by an attacker to manipulate CPU timers, potentially leading to unauthorized access or system crashes. The ramifications of this vulnerability can be severe, as it may allow attackers to execute arbitrary code or disrupt system operations, compromising the integrity and availability of the system.
How To Fix
Minimum fixed version
6.12.0-55.32.1.el10_0
This is the first release that contains the fix.
sudo dnf update kernelTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can disable the affected CPU timer functionalities, although this may lead to reduced performance in applications relying on these timers. It is recommended to apply the patch as soon as possible instead of relying on workarounds.
Conclusion
The kernel vulnerability CVE-2025-38352 poses significant risks to system security and stability. It is crucial to apply the recommended updates promptly to mitigate these risks. Users are encouraged to utilize tools like Vulert to monitor for vulnerabilities in their applications effectively.
See every vulnerability recorded for kernel →
FAQ
CVE-2025-38352 is a vulnerability in the Linux kernel that results from a race condition in the posix-cpu-timers subsystem, potentially allowing attackers to manipulate CPU timers.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
The risks include unauthorized access, system crashes, and potential execution of arbitrary code, which can compromise system integrity and availability.
Run the command 'sudo dnf update kernel' in your terminal to update to the patched version 6.12.0-55.32.1.el10_0.
While a temporary workaround involves disabling affected CPU timer functionalities, it is highly recommended to apply the patch instead.
Related vulnerabilities
Recent vulnerabilities recorded for kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
