Critical UAF Vulnerability in Linux Kernel - CVE-2025-38595
Summary
CVE-2025-38595: In the Linux kernel, the following vulnerability has been resolved: xen: fix UAF in dmabuf_exp_from_pages() [dma_buf_fd() fixes; no preferences regarding the tree it goes through - up to xen folks] As soon as we'd insert... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, managing hardware and system resources. It provides essential services for all other parts of the operating system. This vulnerability affects various Debian versions (11, 12, 13, and 14) of the Linux package, which is crucial for system stability and security.
Vulnerability Detail
CVE-2025-38595 is a use-after-free (UAF) vulnerability in the Linux kernel's handling of DMA buffers. The issue arises when a file reference is inserted into the descriptor table, allowing another thread to close it prematurely. This race condition can lead to accessing objects that have been destroyed, potentially compromising system integrity and security. The vulnerability specifically affects the function dmabuf_exp_from_pages() in the gntdev module, which can lead to severe consequences if exploited.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, avoid using the affected functionality in the gntdev module until the package is updated. Monitor system logs for any unusual behavior that may indicate exploitation attempts.
Conclusion
CVE-2025-38595 is a critical vulnerability in the Linux kernel that requires immediate attention. Users are advised to update their systems to the latest patched version to mitigate risks associated with this use-after-free vulnerability. Regular monitoring and prompt updates are essential for maintaining system security.
See every vulnerability recorded for linux →
FAQ
CVE-2025-38595 is a use-after-free vulnerability in the Linux kernel that can lead to system instability and potential security breaches.
Debian versions 11, 12, 13, and 14 are affected by this vulnerability.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without any signup.
Failing to address this vulnerability may expose your system to exploitation, leading to unauthorized access, data loss, or system crashes.
Yes, a patch is available. Updating the Linux package to the latest version will resolve the vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
