CVE - CVE-2025-38003

CVE-ID
CVE-2025-38003	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: can: bcm: add missing rcu read protection for procfs content When the procfs content is generated for a bcm_op which is in the process to be removed the procfs output might show unreliable data (UAF). As the removal of bcm_op's is already implemented with rcu handling this patch adds the missing rcu_read_lock() and makes sure the list entries are properly removed under rcu protection.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/0622846db728a5332b917c797c733e202c4620ae URL:https://git.kernel.org/stable/c/0622846db728a5332b917c797c733e202c4620ae MISC:https://git.kernel.org/stable/c/19f553a1ddf260da6570ed8f8d91a8c87f49b63a URL:https://git.kernel.org/stable/c/19f553a1ddf260da6570ed8f8d91a8c87f49b63a MISC:https://git.kernel.org/stable/c/1f912f8484e9c4396378c39460bbea0af681f319 URL:https://git.kernel.org/stable/c/1f912f8484e9c4396378c39460bbea0af681f319 MISC:https://git.kernel.org/stable/c/63567ecd99a24495208dc860d50fb17440043006 URL:https://git.kernel.org/stable/c/63567ecd99a24495208dc860d50fb17440043006 MISC:https://git.kernel.org/stable/c/659701c0b954ccdb4a916a4ad59bbc16e726d42c URL:https://git.kernel.org/stable/c/659701c0b954ccdb4a916a4ad59bbc16e726d42c MISC:https://git.kernel.org/stable/c/6d7d458c41b98a5c1670cbd36f2923c37de51cf5 URL:https://git.kernel.org/stable/c/6d7d458c41b98a5c1670cbd36f2923c37de51cf5 MISC:https://git.kernel.org/stable/c/7c9db92d5f0eadca30884af75c53d601edc512ee URL:https://git.kernel.org/stable/c/7c9db92d5f0eadca30884af75c53d601edc512ee MISC:https://git.kernel.org/stable/c/dac5e6249159ac255dad9781793dbe5908ac9ddb URL:https://git.kernel.org/stable/c/dac5e6249159ac255dad9781793dbe5908ac9ddb
Assigning CNA
kernel.org
Date Record Created
20250416	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20250416)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)