CVE-2025-38510
Severity CVSS v4.0:
Pending analysis
Type:
CWE-476
NULL Pointer Dereference
Publication date:
16/08/2025
Last modified:
07/01/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
kasan: remove kasan_find_vm_area() to prevent possible deadlock<br />
<br />
find_vm_area() couldn&#39;t be called in atomic_context. If find_vm_area() is<br />
called to reports vm area information, kasan can trigger deadlock like:<br />
<br />
CPU0 CPU1<br />
vmalloc();<br />
alloc_vmap_area();<br />
spin_lock(&vn->busy.lock)<br />
spin_lock_bh(&some_lock);<br />
<br />
<br />
spin_lock(&some_lock);<br />
<br />
kasan_report();<br />
print_report();<br />
print_address_description();<br />
kasan_find_vm_area();<br />
find_vm_area();<br />
spin_lock(&vn->busy.lock) // deadlock!<br />
<br />
To prevent possible deadlock while kasan reports, remove kasan_find_vm_area().
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.18 (including) | 6.1.146 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.2 (including) | 6.6.99 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.7 (including) | 6.12.39 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.13 (including) | 6.15.7 (excluding) |
| cpe:2.3:o:linux:linux_kernel:6.16:rc1:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.16:rc2:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.16:rc3:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.16:rc4:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.16:rc5:*:*:*:*:*:* | ||
| cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- https://git.kernel.org/stable/c/0c3566d831def922cd56322c772a7b20d8b0e0c0
- https://git.kernel.org/stable/c/2d89dab1ea6086e6cbe6fe92531b496fb6808cb9
- https://git.kernel.org/stable/c/595f78d99b9051600233c0a5c4c47e1097e6ed01
- https://git.kernel.org/stable/c/6ee9b3d84775944fb8c8a447961cd01274ac671c
- https://git.kernel.org/stable/c/8377d7744bdce5c4b3f1b58924eebd3fdc078dfc
- https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html



