In the Linux kernel, the following vulnerability has been resolved:
net: kcm: Fix race condition in kcm_unattach()
syzbot found a race condition when kcm_unattach(psock) and kcm_release(kcm) are executed at the same time.
kcm_unattach() is missing a check of the flag kcm->tx_stopped before calling queue_work().
If the kcm has a reserved psock, kcm_unattach() might get executed between cancel_work_sync() and unreserve_psock() in kcm_release(), requeuing kcm->tx_work right before kcm gets freed in kcm_done().
Remove kcm->tx_stopped and replace it by the less error-prone disable_work_sync().
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade python3-perf6.12-debuginfoUpgrade perf6.12Upgrade kernel6.12-debuginfoUpgrade kernel6.12-tools-debuginfoUpgrade kernel6.12-headersUpgrade kernel6.12-tools-develUpgrade kernel6.12-toolsUpgrade bpftool6.12-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-libbpf-staticUpgrade kernel6.12-develUpgrade kernel6.12-libbpf-develUpgrade bpftool6.12Upgrade kernel-livepatch-6.12.46-66.121Upgrade kernel6.12-libbpfUpgrade kernel6.12-debuginfo-common-aarch64Upgrade perf6.12-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-libbpf-debuginfoUpgrade python3-perf6.12Upgrade kernel6.12 | Sep 30, 2025 | Sep 4, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Suse | — | Upgrade kernel-defaultUpgrade gfs2-kmp-rtUpgrade dtb-hisiliconUpgrade ocfs2-kmp-rtUpgrade dtb-mediatekUpgrade dtb-amlogicUpgrade kernel-64kb-optionalUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-defaultUpgrade dtb-rockchipUpgrade kselftests-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-kvmsmall-develUpgrade kernel-rt-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmallUpgrade kernel-docsUpgrade gfs2-kmp-64kbUpgrade dtb-armUpgrade dtb-xilinxUpgrade dtb-socionextUpgrade dtb-apmUpgrade dtb-amdUpgrade kernel-default-extraUpgrade kernel-rtUpgrade kernel-symsUpgrade kernel-macrosUpgrade kernel-rt-develUpgrade kernel-obs-qaUpgrade ocfs2-kmp-64kbUpgrade kernel-default-optionalUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-default-livepatch-develUpgrade dtb-broadcomUpgrade kernel-kvmsmall-vdsoUpgrade kernel-develUpgrade kernel-64kb-extraUpgrade dtb-lgUpgrade dtb-allwinnerUpgrade kernel-rt-livepatchUpgrade kernel-rt-extraUpgrade kernel-source-vanillaUpgrade kernel-sourceUpgrade dtb-qcomUpgrade dtb-freescaleUpgrade dtb-exynosUpgrade dlm-kmp-64kbUpgrade dtb-alteraUpgrade kernel-rt-vdsoUpgrade kernel-default-develUpgrade dtb-marvellUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-defaultUpgrade dtb-renesasUpgrade kernel-obs-buildUpgrade kernel-64kbUpgrade kernel-default-livepatchUpgrade dtb-nvidiaUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-defaultUpgrade dtb-amazonUpgrade dtb-sprdUpgrade dtb-appleUpgrade kernel-default-vdsoUpgrade dlm-kmp-rtUpgrade dtb-cavium | Dec 5, 2025 | Nov 6, 2025 |
| Ubuntu | — | Upgrade linux-image-nvidia-tegraUpgrade linux-image-6.8.0-1035-nvidia-tegra-rtUpgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-6.8.0-1035-nvidia-tegraUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-nvidia-tegra-rtNo solution exists | Sep 21, 2026 | Sep 18, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub