Race Condition in Linux Kernel Networking Component

CVE-2025-38717

What is CVE-2025-38717?

A race condition exists within the Linux kernel's networking component, specifically affecting the kcm_unattach() and kcm_release() functions. The issue occurs when both functions are executed simultaneously. In this scenario, kcm_unattach() fails to verify the kcm->tx_stopped flag before queuing work, which can lead to requeuing kcm->tx_work shortly before kcm memory is released. This flaw necessitates the removal of the flag check to implement a less error-prone approach using disable_work_sync(), ensuring better synchronization and stability in the kernel's operations.

References