Review reviewHigh

CVE-2025-38176

Linux Linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: binder: fix use-after-free in binderfs_evict_inode() Running 'stress-ng --binderfs 16 --timeout 300' under KASAN-enabled kernel, I've noticed the following: BUG: KASAN: slab-use-after-free in binderfs_evict_inode+0x1de/0x2d0 Write of size 8 at addr ffff88807379bc08 by task stress-ng-binde/1699 CPU: 0 UID: 0 PID: 1699 Comm: stress-ng-binde Not tainted 6.14.0-rc7-g586de92313fc-dirty #13 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-3.fc41 04/01/2014 Call Trace: <TASK> dump_stack_lvl+0x1c2/0x2a0 ? __pfx_du...

CVSS: 7.8
EPSS: 0.14%
CISA KEV: Not listed
Published: 2025.07.04

PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability0.14%

Technical severityCVSS 7.8

Vulnerability overview

Affected product and versions

Product: Linux Linux, linux kernel
Affected versions: >= e77aff5528a183462714f750e45add6cc71e276a < 80ed8ab8efa0d18c03968a2321154f10e2d1a2e3, >= e77aff5528a183462714f750e45add6cc71e276a < aea61a1a77613d4184d7ebe7c1d7cb606458b43b, >= e77aff5528a183462714f750e45add6cc71e276a < 8c0a559825281764061a127632e5ad273f0466ad, >= 6.14, >= 6.14.1 < 6.14.11, >= 6.15 < 6.15.2, 6.14
Fixed versions: 6.14.11, 6.15.2

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that Linux Linux, linux kernel and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE: CWE-416