Race Condition in Linux Kernel Affecting Various Socket Types

CVE-2025-38154

What is CVE-2025-38154?

A race condition present in the Linux kernel concerning the sk_socket can lead to potential system instability when sending data through sockets. Specifically, when the skb_send_sock() function is invoked, there is a lack of synchronization between the backlog thread and the close operation, leading to possible crashes. This vulnerability affects various socket types including TCP, UDP, UNIX, and vsock. The resolution introduces synchronization measures to ensure that the backlog thread completes processing without conflicts during the closure of socket connections, thereby enhancing the overall integrity and reliability of socket communication.

References