exploitDog

CVE-2025-38095

Опубликовано: 03 июл. 2025

Источник: nvd

CVSS3: 5.5

EPSS Низкий

Описание

In the Linux kernel, the following vulnerability has been resolved:

dma-buf: insert memory barrier before updating num_fences

smp_store_mb() inserts memory barrier after storing operation. It is different with what the comment is originally aiming so Null pointer dereference can be happened if memory update is reordered.

Ссылки

https://git.kernel.org/stable/c/08680c4dadc6e736c75bc2409d833f03f9003c51
Patch
https://git.kernel.org/stable/c/3becc659f9cb76b481ad1fb71f54d5c8d6332d3f
Patch
https://git.kernel.org/stable/c/72c7d62583ebce7baeb61acce6057c361f73be4a
Patch
https://git.kernel.org/stable/c/90eb79c4ed98a4e24a62ccf61c199ab0f680fa8f
Patch
https://git.kernel.org/stable/c/c9d2b9a80d06a58f37e0dc8c827075639b443927
Patch
https://git.kernel.org/stable/c/d0b7f11dd68b593bd970e5735be00e8d89bace30
Patch
https://git.kernel.org/stable/c/fe1bebd0edb22e3536cbc920ec713331d1367ad4
Patch
https://lists.debian.org/debian-lts-announce/2025/08/msg00010.html
Third Party Advisory
Mailing List
https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html
Third Party Advisory
Mailing List

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.0 (включая) до 5.10.241 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.11 (включая) до 5.15.192 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.16 (включая) до 6.1.140 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.2 (включая) до 6.6.92 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.7 (включая) до 6.12.30 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.13 (включая) до 6.14.8 (исключая)

cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.15:rc2:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.15:rc3:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.15:rc4:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.15:rc5:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.15:rc6:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*

EPSS

Процентиль: 7%

0.00026

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-476

Связанные уязвимости

CVE-2025-38095

CVSS3: 5.5

ubuntu

6 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: dma-buf: insert memory barrier before updating num_fences smp_store_mb() inserts memory barrier after storing operation. It is different with what the comment is originally aiming so Null pointer dereference can be happened if memory update is reordered.

CVE-2025-38095

CVSS3: 7

redhat

6 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: dma-buf: insert memory barrier before updating num_fences smp_store_mb() inserts memory barrier after storing operation. It is different with what the comment is originally aiming so Null pointer dereference can be happened if memory update is reordered.

CVE-2025-38095

msrc

2 дня назад

dma-buf: insert memory barrier before updating num_fences

CVE-2025-38095

CVSS3: 5.5

debian

6 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: d ...

GHSA-q59c-3x85-f94g

CVSS3: 5.5

github

6 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: dma-buf: insert memory barrier before updating num_fences smp_store_mb() inserts memory barrier after storing operation. It is different with what the comment is originally aiming so Null pointer dereference can be happened if memory update is reordered.

EPSS

Процентиль: 7%

0.00026

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-476