In the Linux kernel, the following vulnerability has been resolved:
net: kcm: Fix race condition in kcm_unattach()
syzbot found a race condition when kcm_unattach(psock) and kcm_release(kcm) are executed at the same time.
kcm_unattach() is missing a check of the flag kcm->tx_stopped before calling queue_work().
If the kcm has a reserved psock, kcm_unattach() might get executed between cancel_work_sync() and unreserve_psock() in kcm_release(), requeuing kcm->tx_work right before kcm gets freed in kcm_done().
Remove kcm->tx_stopped and replace it by the less error-prone disable_work_sync().
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel6.12-libbpfUpgrade perf6.12-debuginfoUpgrade kernel-livepatch-6.12.46-66.121Upgrade bpftool6.12Upgrade kernel6.12-modules-extraUpgrade kernel6.12-modules-extra-commonUpgrade python3-perf6.12Upgrade kernel6.12-develUpgrade kernel6.12-libbpf-debuginfoUpgrade kernel6.12Upgrade bpftool6.12-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-libbpf-staticUpgrade kernel6.12-libbpf-develUpgrade perf6.12Upgrade kernel6.12-debuginfoUpgrade kernel6.12-tools-develUpgrade kernel6.12-headersUpgrade kernel6.12-tools-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-tools | Sep 30, 2025 | Sep 4, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Suse | — | Upgrade dtb-caviumUpgrade kernel-default-livepatch-develUpgrade dtb-alteraUpgrade kselftests-kmp-64kbUpgrade kernel-default-optionalUpgrade dtb-qcomUpgrade kernel-sourceUpgrade kernel-source-vanillaUpgrade dlm-kmp-64kbUpgrade kernel-rt-optionalUpgrade dtb-exynosUpgrade dtb-amazonUpgrade dtb-marvellUpgrade dtb-appleUpgrade ocfs2-kmp-defaultUpgrade dtb-nvidiaUpgrade kernel-default-livepatchUpgrade kernel-default-develUpgrade kernel-64kb-extraUpgrade kernel-develUpgrade dtb-lgUpgrade dtb-allwinnerUpgrade kernel-rt-livepatchUpgrade ocfs2-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-rt-vdsoUpgrade kernel-default-vdsoUpgrade cluster-md-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade dtb-freescaleUpgrade dtb-sprdUpgrade kernel-obs-buildUpgrade cluster-md-kmp-64kbUpgrade kernel-64kbUpgrade kernel-rt-extraUpgrade dlm-kmp-rtUpgrade dtb-broadcomUpgrade dtb-renesasUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade dtb-armUpgrade dtb-mediatekUpgrade kernel-rt-livepatch-develUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade kernel-docsUpgrade kernel-64kb-develUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-default-extraUpgrade dtb-xilinxUpgrade kselftests-kmp-rtUpgrade dtb-rockchipUpgrade kernel-defaultUpgrade gfs2-kmp-rtUpgrade kernel-macrosUpgrade kernel-rtUpgrade dtb-hisiliconUpgrade kernel-symsUpgrade dtb-apmUpgrade kernel-rt-develUpgrade dtb-socionextUpgrade kernel-obs-qaUpgrade kernel-zfcpdumpUpgrade dtb-amdUpgrade gfs2-kmp-64kbUpgrade dtb-amlogicUpgrade dlm-kmp-default | Dec 5, 2025 | Nov 6, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub