Race Condition Vulnerability in Linux Kernel's RXRPC Socket Handling

CVE-2025-38524

What is CVE-2025-38524?

The Linux kernel's RXRPC subsystem has a race condition vulnerability that arises when a call receives an event while being processed. This issue allows a second thread to improperly access and manage calls on a socket's queue, potentially leading to an unexpected state and system instability. The vulnerability is mitigated by ensuring that calls are dequeued properly and preventing subsequent operations on already released calls. This fix enhances the overall stability and security of RXRPC socket operations, mitigating the risks of race condition exploits.

References