In the Linux kernel, the following vulnerability has been resolved:
net: kcm: Fix race condition in kcm_unattach()
syzbot found a race condition when kcm_unattach(psock) and kcm_release(kcm) are executed at the same time.
kcm_unattach() is missing a check of the flag kcm->tx_stopped before calling queue_work().
If the kcm has a reserved psock, kcm_unattach() might get executed between cancel_work_sync() and unreserve_psock() in kcm_release(), requeuing kcm->tx_work right before kcm gets freed in kcm_done().
Remove kcm->tx_stopped and replace it by the less error-prone disable_work_sync().
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade perf6.12Upgrade kernel6.12-debuginfoUpgrade kernel6.12-toolsUpgrade kernel6.12-tools-develUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-tools-debuginfoUpgrade kernel6.12-headersUpgrade kernel6.12-develUpgrade kernel6.12-modules-extra-commonUpgrade python3-perf6.12Upgrade kernel6.12Upgrade bpftool6.12-debuginfoUpgrade kernel6.12-libbpf-debuginfoUpgrade kernel6.12-libbpf-develUpgrade bpftool6.12Upgrade kernel-livepatch-6.12.46-66.121Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-libbpfUpgrade kernel6.12-debuginfo-common-aarch64Upgrade perf6.12-debuginfoUpgrade kernel6.12-libbpf-staticUpgrade kernel6.12-modules-extra | Sep 30, 2025 | Sep 4, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Suse | — | Upgrade kernel-docs-htmlUpgrade dtb-freescaleUpgrade dtb-nvidiaUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-defaultUpgrade dtb-alteraUpgrade dtb-amazonUpgrade dtb-caviumUpgrade dtb-qcomUpgrade kselftests-kmp-64kbUpgrade kernel-sourceUpgrade kernel-rt-extraUpgrade dtb-broadcomUpgrade kernel-default-optionalUpgrade kernel-source-vanillaUpgrade kernel-default-livepatch-develUpgrade kernel-rt-optionalUpgrade dlm-kmp-rtUpgrade kernel-64kbUpgrade cluster-md-kmp-64kbUpgrade dtb-sprdUpgrade kernel-obs-buildUpgrade dlm-kmp-64kbUpgrade dtb-exynosUpgrade dtb-appleUpgrade dtb-allwinnerUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade kernel-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-livepatchUpgrade kernel-default-vdsoUpgrade kernel-default-develUpgrade kernel-rt-vdsoUpgrade dtb-marvellUpgrade dtb-lgUpgrade kernel-64kb-extraUpgrade dtb-renesasUpgrade dtb-mediatekUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade dtb-armUpgrade kernel-kvmsmall-develUpgrade kernel-docsUpgrade kernel-64kb-develUpgrade dtb-hisiliconUpgrade kernel-rtUpgrade kernel-symsUpgrade kernel-default-extraUpgrade dtb-xilinxUpgrade kernel-obs-qaUpgrade kernel-macrosUpgrade dtb-apmUpgrade kernel-rt-develUpgrade dtb-socionextUpgrade gfs2-kmp-64kbUpgrade dtb-rockchipUpgrade kselftests-kmp-rtUpgrade dtb-amdUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-64kb-optionalUpgrade dtb-amlogicUpgrade gfs2-kmp-rtUpgrade kernel-defaultUpgrade cluster-md-kmp-default | Dec 5, 2025 | Nov 6, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub