Race Condition Vulnerability in Linux Kernel Networking Stack

CVE-2025-38617

What is CVE-2025-38617?

A race condition exists in the networking stack of the Linux kernel, specifically in the functions packet_set_ring() and packet_notifier(). This flaw allows multiple threads to interact with the network interface during critical locking periods, potentially leading to inconsistent states and unpredictable network behavior. Affected versions need to ensure proper handling of lock management in these functions to prevent unintended interactions during networking events like NETDEV_UP.

References