Race Condition Vulnerability in Linux Kernel: Impacting Debian Packages
Summary
DEBIAN-CVE-2025-38524: In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix recv-recv race of completed call If a call receives an event (such as incoming data), the call gets placed on the socket's queue and a thread... Affects linux versions < 6.12.41-1. Fixed in 6.12.41-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Linux kernel is the core component of the Debian operating system, responsible for managing hardware resources and providing essential services to software applications. It is known for its stability, performance, and security features. However, like any complex software, it can have vulnerabilities. This specific vulnerability affects the rxrpc subsystem, which handles remote procedure calls, allowing for communication between different processes over a network. The vulnerability arises from a race condition that can lead to unexpected behavior and potential system crashes.
Vulnerability Detail
In the Linux kernel, a race condition exists in the rxrpc subsystem where multiple threads can simultaneously access and modify the state of a call. When one thread processes an event from a call while another thread attempts to access the same call, it can lead to a situation where the call is released unexpectedly. This results in a kernel BUG, causing the system to crash. The vulnerability is identified as DEBIAN-CVE-2025-38524 and affects Debian versions 13 and 14 of the linux package.
How To Fix
Minimum fixed version
6.12.41-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is recommended to apply the patch as soon as it is available to mitigate the risk.
Conclusion
The race condition vulnerability in the Linux kernel's rxrpc subsystem poses a significant risk to Debian users. It is essential to update to the patched versions of the linux package to ensure system stability and security. Regular monitoring for vulnerabilities using tools like Vulert can help maintain a secure software environment.
See every vulnerability recorded for linux →
FAQ
The vulnerability is a race condition in the rxrpc subsystem of the Linux kernel, which can lead to system crashes.
Debian versions 13 and 14 are affected by this vulnerability.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
While there are no specific workarounds, it is crucial to plan for an update as soon as possible to avoid potential system instability.
More details can be found in the official Debian CVE database at https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2025-38524.json.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
