CVE-2025-38003
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2025
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
can: bcm: add missing rcu read protection for procfs content
In the Linux kernel, the following vulnerability has been resolved: can: bcm: add missing rcu read protection for procfs content When the procfs content is generated for a bcm_op which is in the process to be removed the procfs output might show unreliable data (UAF). As the removal of bcm_op's is already implemented with rcu handling this patch adds the missing rcu_read_lock() and makes sure the list entries are properly removed under rcu protection.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 5b48f5711f1c630841ab78dcc061de902f0e37bf | affected | git | 19f553a1ddf260da6570ed8f8d91a8c87f49b63a | Unavailable | None listed |
| 85cd41070df992d3c0dfd828866fdd243d3b774a | affected | git | 659701c0b954ccdb4a916a4ad59bbc16e726d42c | Unavailable | None listed |
| f34f2a18e47b73e48f90a757e1f4aaa8c7d665a1 | affected | git | 0622846db728a5332b917c797c733e202c4620ae | Unavailable | None listed |
| f1b4e32aca0811aa011c76e5d6cf2fa19224b386 | affected | git | 6d7d458c41b98a5c1670cbd36f2923c37de51cf5 | Unavailable | None listed |
| f1b4e32aca0811aa011c76e5d6cf2fa19224b386 | affected | git | 1f912f8484e9c4396378c39460bbea0af681f319 | Unavailable | None listed |
| f1b4e32aca0811aa011c76e5d6cf2fa19224b386 | affected | git | 63567ecd99a24495208dc860d50fb17440043006 | Unavailable | None listed |
| f1b4e32aca0811aa011c76e5d6cf2fa19224b386 | affected | git | 7c9db92d5f0eadca30884af75c53d601edc512ee | Unavailable | None listed |
| f1b4e32aca0811aa011c76e5d6cf2fa19224b386 | affected | git | dac5e6249159ac255dad9781793dbe5908ac9ddb | Unavailable | None listed |
| fbac09a3b8890003c0c55294c00709f3ae5501bb | affected | git | Unavailable | Unavailable | None listed |
| edb4baffb9483141a50fb7f7146cfe4a4c0c2db8 | affected | git | Unavailable | Unavailable | None listed |
| 5.4.205 | affected | semver | 5.4.294 | Unavailable | None listed |
| 5.10.130 | affected | semver | 5.10.238 | Unavailable | None listed |
| 5.15.54 | affected | semver | 5.15.185 | Unavailable | None listed |
| 4.19.252 | affected | semver | 4.20 | Unavailable | None listed |
| 5.18.11 | affected | semver | 5.19 | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 5.19 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 5.19 | Unavailable | None listed |
| 5.4.294 | unaffected | semver | Unavailable | 5.4.* | None listed |
| 5.10.238 | unaffected | semver | Unavailable | 5.10.* | None listed |
| 5.15.185 | unaffected | semver | Unavailable | 5.15.* | None listed |
| 6.1.141 | unaffected | semver | Unavailable | 6.1.* | None listed |
| 6.6.93 | unaffected | semver | Unavailable | 6.6.* | None listed |
| 6.12.31 | unaffected | semver | Unavailable | 6.12.* | None listed |
| 6.14.9 | unaffected | semver | Unavailable | 6.14.* | None listed |
| 6.15 | unaffected | original_commit_for_fix | Unavailable | * | None listed |