Race Condition Vulnerability in Linux Kernel Affecting Socket Management
Summary
CVE-2025-38154: In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Avoid using sk_socket after free when sending The sk->sk_socket is not locked or referenced in backlog thread, and during the call to skb_... Affects linux versions < 6.1.147-1. Fixed in 6.1.147-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware and software interactions. It supports various socket types, including TCP, UDP, Unix, and VSOCK, which are crucial for network communication. This vulnerability arises from improper handling of socket references, leading to potential system crashes and instability.
Vulnerability Detail
In the Linux kernel, a race condition exists in the handling of socket references during the sending of messages. Specifically, the sk->sk_socket is not properly locked or referenced in the backlog thread, which can lead to a situation where the socket is freed while still in use. This can cause a panic in the system, resulting in crashes. The vulnerability affects all socket types and can be exploited during concurrent operations, leading to unpredictable behavior and potential denial of service.
How To Fix
Minimum fixed version
6.1.147-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. However, users are advised to limit concurrent socket operations until the patch is applied to mitigate the risk of encountering the race condition.
Conclusion
The CVE-2025-38154 vulnerability in the Linux kernel presents a significant risk due to a race condition in socket management. Users are urged to update their systems to the latest patched version to mitigate this risk. Monitoring tools like Vulert can assist in identifying vulnerabilities in your software.
See every vulnerability recorded for linux →
FAQ
CVE-2025-38154 is a vulnerability in the Linux kernel that allows for a race condition in socket management, potentially leading to system crashes.
All versions of the Linux kernel that support socket operations are affected by this vulnerability.
You can use tools like Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
While there are no specific workarounds, it is advisable to limit the use of concurrent socket operations until the patch is applied.
The race condition can lead to unpredictable behavior, including system crashes and denial of service, impacting overall system stability.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
