In the Linux kernel, the following vulnerability has been resolved:
net: kcm: Fix race condition in kcm_unattach()
syzbot found a race condition when kcm_unattach(psock) and kcm_release(kcm) are executed at the same time.
kcm_unattach() is missing a check of the flag kcm->tx_stopped before calling queue_work().
If the kcm has a reserved psock, kcm_unattach() might get executed between cancel_work_sync() and unreserve_psock() in kcm_release(), requeuing kcm->tx_work right before kcm gets freed in kcm_done().
Remove kcm->tx_stopped and replace it by the less error-prone disable_work_sync().
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel6.12-tools-debuginfoUpgrade perf6.12Upgrade kernel6.12-tools-develUpgrade kernel6.12-toolsUpgrade kernel6.12-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-headersUpgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-libbpf-staticUpgrade kernel-livepatch-6.12.46-66.121Upgrade kernel6.12-libbpf-develUpgrade bpftool6.12Upgrade kernel6.12Upgrade bpftool6.12-debuginfoUpgrade perf6.12-debuginfoUpgrade kernel6.12-libbpfUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-modules-extraUpgrade kernel6.12-libbpf-debuginfoUpgrade kernel6.12-develUpgrade python3-perf6.12 | Sep 30, 2025 | Sep 4, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Suse | — | Upgrade kernel-rt-livepatch-develUpgrade kernel-rtUpgrade dtb-rockchipUpgrade kselftests-kmp-rtUpgrade dtb-armUpgrade cluster-md-kmp-defaultUpgrade dtb-amdUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-develUpgrade kernel-macrosUpgrade dtb-socionextUpgrade kernel-rt-develUpgrade kernel-obs-qaUpgrade dtb-apmUpgrade kernel-zfcpdumpUpgrade kernel-64kb-optionalUpgrade dtb-amlogicUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade dtb-mediatekUpgrade ocfs2-kmp-rtUpgrade kernel-default-extraUpgrade kernel-symsUpgrade dtb-hisiliconUpgrade kernel-defaultUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade dtb-xilinxUpgrade kernel-docsUpgrade kernel-kvmsmall-develUpgrade kernel-rt-optionalUpgrade dtb-appleUpgrade dtb-alteraUpgrade kernel-default-optionalUpgrade kselftests-kmp-64kbUpgrade kernel-docs-htmlUpgrade dtb-caviumUpgrade kernel-default-livepatchUpgrade kernel-default-livepatch-develUpgrade dtb-amazonUpgrade kernel-rt-livepatchUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade dtb-allwinnerUpgrade dtb-lgUpgrade kernel-64kb-extraUpgrade kernel-develUpgrade dtb-nvidiaUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-source-vanillaUpgrade dlm-kmp-64kbUpgrade kernel-rt-extraUpgrade kernel-64kbUpgrade dtb-broadcomUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade dtb-renesasUpgrade dtb-sprdUpgrade kernel-default-develUpgrade kernel-default-vdsoUpgrade kernel-sourceUpgrade gfs2-kmp-defaultUpgrade dtb-qcomUpgrade dtb-marvellUpgrade kernel-obs-buildUpgrade dtb-exynosUpgrade dtb-freescale | Dec 5, 2025 | Nov 6, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub