Use-After-Free Vulnerability in Linux Kernel - CVE-2025-38377
Summary
CVE-2025-38377: In the Linux kernel, the following vulnerability has been resolved: rose: fix dangling neighbour pointers in rose_rt_device_down() There are two bugs in rose_rt_device_down() that can cause use-after-free: 1. Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware management and system resources. It is known for its stability, performance, and security features. However, like any complex software, it is susceptible to vulnerabilities. CVE-2025-38377 specifically affects the Linux kernel versions in Debian distributions, where improper handling of neighbour pointers can lead to serious security issues.
Vulnerability Detail
CVE-2025-38377 is a use-after-free vulnerability found in the Linux kernel's rose_rt_device_down() function. This vulnerability arises from two bugs: first, the loop bound 't->count' is modified within the loop, potentially causing it to terminate early and miss some entries. Second, when an entry is removed from the neighbour array, subsequent entries are shifted up, but the loop index 'i' is still incremented, leading to skipped checks. This can leave dangling pointers in the array, which, when accessed, can lead to undefined behavior and security breaches.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, avoid using the affected functionality until the package is updated. Monitor your system for any unusual behavior that may indicate exploitation of this vulnerability.
Conclusion
CVE-2025-38377 is a critical vulnerability in the Linux kernel that requires immediate attention. By updating to the patched version and monitoring your systems, you can mitigate the risks associated with this vulnerability. Utilize tools like Vulert for ongoing vulnerability management.
See every vulnerability recorded for linux →
FAQ
CVE-2025-38377 is a use-after-free vulnerability in the Linux kernel that can lead to security risks due to improper handling of neighbour pointers.
The vulnerability affects Linux kernel versions in Debian 11, 12, and 13, with a specific fix available for Debian 13.
You can use tools like Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
Exploitation of this vulnerability can lead to undefined behavior, system crashes, or unauthorized access to system resources, posing significant security risks.
It is recommended to regularly check for updates and apply them promptly to ensure your system is protected against known vulnerabilities.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
