SECUFOCUSNOW
Home›CVE index›CVE-2025-38346
Review reviewHigh

CVE-2025-38346

Linux Linux, linux kernel, debian linux

In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix UAF when lookup kallsym after ftrace disabled The following issue happens with a buggy module: BUG: unable to handle page fault for address: ffffffffc05d0218 PGD 1bd66f067 P4D 1bd66f067 PUD 1bd671067 PMD 101808067 PTE 0 Oops: Oops: 0000 [#1] SMP KASAN PTI Tainted: [O]=OOT_MODULE, [E]=UNSIGNED_MODULE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS RIP: 0010:sized_strscpy+0x81/0x2f0 RSP: 0018:ffff88812d76fa08 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffffffffc0601010 RCX: dffffc0000000000 RDX: 000000...

CVSS
7.8
EPSS
0.17%
6.80% percentile
CISA KEV
Not listed
Published
2025.07.10
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability0.17%
Technical severityCVSS 7.8

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix UAF when lookup kallsym after ftrace disabled The following issue happens with a buggy module: BUG: unable to handle page fault for address: ffffffffc05d0218 PGD 1bd66f067 P4D 1bd66f067 PUD 1bd671067 PMD 101808067 PTE 0 Oops: Oops: 0000 [#1] SMP KASAN PTI Tainted: [O]=OOT_MODULE, [E]=UNSIGNED_MODULE Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS RIP: 0010:sized_strscpy+0x81/0x2f0 RSP: 0018:ffff88812d76fa08 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffffffffc0601010 RCX: dffffc0000000000 RDX: 000000...

Affected product and versions

Product
Linux Linux, linux kernel, debian linux
Affected versions
>= aba4b5c22cbac296f4081a0476d0c55828f135b4 < d064c68781c19f378af1ae741d9132d35d24b2bb, >= aba4b5c22cbac296f4081a0476d0c55828f135b4 < 8690cd3258455bbae64f809e1d3ee0f043661c71, >= aba4b5c22cbac296f4081a0476d0c55828f135b4 < 6805582abb720681dd1c87ff677f155dcf4e86c9, >= aba4b5c22cbac296f4081a0476d0c55828f135b4 < 03a162933c4a03b9f1a84f7d8482903c7e1e11bb, >= aba4b5c22cbac296f4081a0476d0c55828f135b4 < 83a692a9792aa86249d68a8ac0b9d55ecdd255fa, >= aba4b5c22cbac296f4081a0476d0c55828f135b4 < 8e89c17dc8970c5f71a3a991f5724d4c8de42d8c, >= aba4b5c22cbac296f4081a0476d0c55828f135b4 < f78a786ad9a5443a29eef4dae60cde85b7375129, >= aba4b5c22cbac296f4081a0476d0c55828f135b4 < f914b52c379c12288b7623bb814d0508dbe7481d, >= 4.15, >= 4.15 < 5.4.295, >= 5.5 < 5.10.239, >= 5.11 < 5.15.186, >= 5.16 < 6.1.142, >= 6.2 < 6.6.95, >= 6.7 < 6.12.35, >= 6.13 < 6.15.4, 11.0
Fixed versions
5.4.295, 5.10.239, 5.15.186, 6.1.142, 6.6.95, 6.12.35, 6.15.4

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux Linux, linux kernel, debian linux and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
CWE-416