EXPOSURES › CVE-2025-38352

CVE-2025-38352

HIGH ⌖ ON CISA KEV · EXPLOITED

DETAIL

SourceCISA-KEV · kev Published2025-09-04 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2025-38352 ↗

⚡ RCE ⌖ EXPLOITED IN THE WILD SHAME 72/100 exploited-in-wildunpatched

Linux Kernel TOCTOU race condition actively exploited

A high-severity TOCTOU race condition in the Linux kernel allowed unauthorized access, potentially leading to data breaches.

Shame score — Active exploitation of a high-severity vulnerability in a widely-used operating system kernel.

▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

PLAYERS IMPLICATED

linux · vendor Kernel · product

DESCRIPTION

Linux kernel contains a time-of-check time-of-use (TOCTOU) race condition vulnerability that has a high impact on confidentiality, integrity, and availability.

AFFECTED FEDRAMP PRODUCTS · 0

No correlated FedRAMP products.