CVE-2025-38524— Linux kernel 安全漏洞
一分钟漏洞结论
影响对象
Linux Linux
利用判断
尚无明确在野利用证据，仍需结合暴露面评估
建议动作
优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于rxrpc在已完成调用上存在接收竞争，可能导致用户调用ID泄漏。
可能的 ATT&CK 技术 1 AI
T1059 · Command and Scripting Interpreter影响版本矩阵 12
| 厂商 | 产品 | 版本范围 | 状态 |
|---|---|---|---|
| Linux | Linux | 248f219cb8bcbfbd7f132752d44afa2df7c241d1< 4aed0eeca58e26d752bb08b293b8dc75c6820b23 |
affected |
248f219cb8bcbfbd7f132752d44afa2df7c241d1< 7692bde890061797f3dece0148d7859e85c55778 |
affected | ||
248f219cb8bcbfbd7f132752d44afa2df7c241d1< 839fe96c15209dc2255c064bb44b636efe04f032 |
affected | ||
248f219cb8bcbfbd7f132752d44afa2df7c241d1< 6c75a97a32a5fa2060c3dd30207e63b6914b606d |
affected | ||
248f219cb8bcbfbd7f132752d44afa2df7c241d1< 962fb1f651c2cf2083e0c3ef53ba69e3b96d3fbc |
affected | ||
4.9 |
affected | ||
< 4.9 |
unaffected | ||
5.10.266≤ 5.10.* |
unaffected | ||
| … +4 条更多 | |||
获取后续新漏洞提醒
登录后订阅
一、 漏洞 CVE-2025-38524 基础信息
漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
rxrpc: Fix recv-recv race of completed call
来源: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved:
rxrpc: Fix recv-recv race of completed call
If a call receives an event (such as incoming data), the call gets placed
on the socket's queue and a thread in recvmsg can be awakened to go and
process it. Once the thread has picked up the call off of the queue,
further events will cause it to be requeued, and once the socket lock is
dropped (recvmsg uses call->user_mutex to allow the socket to be used in
parallel), a second thread can come in and its recvmsg can pop the call off
the socket queue again.
In such a case, the first thread will be receiving stuff from the call and
the second thread will be blocked on call->user_mutex. The first thread
can, at this point, process both the event that it picked call for and the
event that the second thread picked the call for and may see the call
terminate - in which case the call will be "released", decoupling the call
from the user call ID assigned to it (RXRPC_USER_CALL_ID in the control
message).
The first thread will return okay, but then the second thread will wake up
holding the user_mutex and, if it sees that the call has been released by
the first thread, it will BUG thusly:
kernel BUG at net/rxrpc/recvmsg.c:474!
Fix this by just dequeuing the call and ignoring it if it is seen to be
already released. We can't tell userspace about it anyway as the user call
ID has become stale.
来源: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
来源: CVE Program / CVE List V5
Vulnerability Type
N/A
来源: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于rxrpc在已完成调用上存在接收竞争，可能导致用户调用ID泄漏。
来源: 中国国家信息安全漏洞库 CNNVD
CVSS Information
N/A
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Type
N/A
来源: 中国国家信息安全漏洞库 CNNVD
受影响产品
二、漏洞 CVE-2025-38524 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|
AI 生成 POC
高级
未找到公开 POC。
登录以生成 AI POC三、漏洞 CVE-2025-38524 的情报信息
请登录查看更多情报信息。
CVE-2025-38524 补丁与修复 (5)
同批安全公告 · Linux · 2025-08-16 · 共 59 条
| CVE-2025-38533 | 9.8 CRITICAL | Linux kernel 安全漏洞 |
| CVE-2025-38527 | 9.8 CRITICAL | Linux kernel 安全漏洞 |
| CVE-2025-38552 | 9.4 CRITICAL | Linux kernel 安全漏洞 |
| CVE-2023-3867 | 9.1 CRITICAL | Linux kernel 安全漏洞 |
| CVE-2023-4515 | 9.1 CRITICAL | Linux kernel 安全漏洞 |
| CVE-2023-32249 | 9.1 CRITICAL | Linux kernel 安全漏洞 |
| CVE-2025-38512 | 8.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2025-38511 | 8.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2023-4130 | 8.1 HIGH | Linux kernel 安全漏洞 |
| CVE-2023-3865 | 8.1 HIGH | Linux kernel 安全漏洞 |
| CVE-2025-38550 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2025-38502 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2025-38532 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2025-38542 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2025-38536 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2025-38539 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2025-38501 | 7.5 HIGH | Linux kernel 安全漏洞 |
| CVE-2025-38514 | 7.5 HIGH | Linux kernel 安全漏洞 |
| CVE-2025-38526 | 7.5 HIGH | Linux kernel 安全漏洞 |
| CVE-2025-38523 | 7.5 HIGH | Linux kernel 安全漏洞 |
显示前 20 条，共 59 条。 查看全部 → →
IV. Related Vulnerabilities
V. Comments for CVE-2025-38524
暂无评论