Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2025-38003— can: bcm: add missing rcu read protection for procfs content

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于缺少rcu读取保护，可能导致不可靠数据输出。

CVSS 7.8 · High EPSS 0.28% · P20

Possible ATT&CK Techniques 1 AI

T1211 · Exploitation for Stealth

Affected Version Matrix 25

VendorProduct Version RangeStatus
Linux Linux 5b48f5711f1c630841ab78dcc061de902f0e37bf< 19f553a1ddf260da6570ed8f8d91a8c87f49b63a affected
85cd41070df992d3c0dfd828866fdd243d3b774a< 659701c0b954ccdb4a916a4ad59bbc16e726d42c affected
f34f2a18e47b73e48f90a757e1f4aaa8c7d665a1< 0622846db728a5332b917c797c733e202c4620ae affected
f1b4e32aca0811aa011c76e5d6cf2fa19224b386< 6d7d458c41b98a5c1670cbd36f2923c37de51cf5 affected
f1b4e32aca0811aa011c76e5d6cf2fa19224b386< 1f912f8484e9c4396378c39460bbea0af681f319 affected
f1b4e32aca0811aa011c76e5d6cf2fa19224b386< 63567ecd99a24495208dc860d50fb17440043006 affected
f1b4e32aca0811aa011c76e5d6cf2fa19224b386< 7c9db92d5f0eadca30884af75c53d601edc512ee affected
f1b4e32aca0811aa011c76e5d6cf2fa19224b386< dac5e6249159ac255dad9781793dbe5908ac9ddb affected
… +17 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2025-38003

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
can: bcm: add missing rcu read protection for procfs content
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: can: bcm: add missing rcu read protection for procfs content When the procfs content is generated for a bcm_op which is in the process to be removed the procfs output might show unreliable data (UAF). As the removal of bcm_op's is already implemented with rcu handling this patch adds the missing rcu_read_lock() and makes sure the list entries are properly removed under rcu protection.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于缺少rcu读取保护，可能导致不可靠数据输出。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux 5b48f5711f1c630841ab78dcc061de902f0e37bf ~ 19f553a1ddf260da6570ed8f8d91a8c87f49b63a -
Linux Linux 5.19 -

II. Public POCs for CVE-2025-38003

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2025-38003

请登录查看更多情报信息。

Patches & Fixes for CVE-2025-38003 (1)

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2025-38003

No comments yet

Leave a comment