CVE-2025-38352HIGH 7.4CISA KEVEPSS p76.6%
CVE-2025-38352Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability
Linux / Kernel
Description
Linux kernel contains a time-of-check time-of-use (TOCTOU) race condition vulnerability that has a high impact on confidentiality, integrity, and availability.
Scoring
| CVSS 3.1 | 7.4 (HIGH) |
| Vector | CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 1.87% probability of exploitation · percentile 76.6% · 2026-06-19T12:03:05Z |
| Published | 2025-07-22 |
| Last modified | 2026-01-08 |
CISA KEV entry
Added to KEV: 2025-09-04
Underlying weaknesses· 1
References
- https://git.kernel.org/stable/c/2c72fe18cc5f9f1750f5bc148cf1c94c29e106ff
- https://git.kernel.org/stable/c/2f3daa04a9328220de46f0d5c919a6c0073a9f0b
- https://git.kernel.org/stable/c/460188bc042a3f40f72d34b9f7fc6ee66b0b757b
- https://git.kernel.org/stable/c/764a7a5dfda23f69919441f2eac2a83e7db6e5bb
- https://git.kernel.org/stable/c/78a4b8e3795b31dae58762bc091bb0f4f74a2200
- https://git.kernel.org/stable/c/c076635b3a42771ace7d276de8dc3bc76ee2ba1b
- https://git.kernel.org/stable/c/c29d5318708e67ac13c1b6fc1007d179fb65b4d7
- https://git.kernel.org/stable/c/f90fff1e152dedf52b932240ebbd670d83330eca
1
| Type | Target | Confidence | Tier |
|---|---|---|---|
| Weakness | Time-of-check Time-of-use (TOCTOU) Race Conditioncwe-367 | 0% | live |
(incoming)1
| Type | Target | Confidence | Tier |
|---|---|---|---|
| KEVEntry | Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerabilitykev-cve-2025-38352 | 0% | live |
Related by meaning· 6
Nearest entities by semantic similarity across the cs-graph corpus.