CVE-2025-38617

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> net/packet: fix a race in packet_set_ring() and packet_notifier()<br /> <br /> When packet_set_ring() releases po-&gt;bind_lock, another thread can<br /> run packet_notifier() and process an NETDEV_UP event.<br /> <br /> This race and the fix are both similar to that of commit 15fe076edea7<br /> ("net/packet: fix a race in packet_bind() and packet_notifier()").<br /> <br /> There too the packet_notifier NETDEV_UP event managed to run while a<br /> po-&gt;bind_lock critical section had to be temporarily released. And<br /> the fix was similarly to temporarily set po-&gt;num to zero to keep<br /> the socket unhooked until the lock is retaken.<br /> <br /> The po-&gt;bind_lock in packet_set_ring and packet_notifier precede the<br /> introduction of git history.