CVE - CVE-2025-38282

CVE-ID
CVE-2025-38282	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: kernfs: Relax constraint in draining guard The active reference lifecycle provides the break/unbreak mechanism but the active reference is not truly active after unbreak -- callers don't use it afterwards but it's important for proper pairing of kn->active counting. Assuming this mechanism is in place, the WARN check in kernfs_should_drain_open_files() is too sensitive -- it may transiently catch those (rightful) callers between kernfs_unbreak_active_protection() and kernfs_put_active() as found out by Chen Ridong: kernfs_remove_by_name_ns kernfs_get_active // active=1 __kernfs_remove // active=0x80000002 kernfs_drain ... wait_event //waiting (active == 0x80000001) kernfs_break_active_protection // active = 0x80000001 // continue kernfs_unbreak_active_protection // active = 0x80000002 ... kernfs_should_drain_open_files // warning occurs kernfs_put_active To avoid the false positives (mind panic_on_warn) remove the check altogether. (This is meant as quick fix, I think active reference break/unbreak may be simplified with larger rework.)
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/071d8e4c2a3b0999a9b822e2eb8854784a350f8a URL:https://git.kernel.org/stable/c/071d8e4c2a3b0999a9b822e2eb8854784a350f8a MISC:https://git.kernel.org/stable/c/2d6a67c2b3b87808a347dc1047b520a9dd177a4f URL:https://git.kernel.org/stable/c/2d6a67c2b3b87808a347dc1047b520a9dd177a4f MISC:https://git.kernel.org/stable/c/6bfb154f95d5f0ab7ed056f23aba8c1a94cb3927 URL:https://git.kernel.org/stable/c/6bfb154f95d5f0ab7ed056f23aba8c1a94cb3927 MISC:https://git.kernel.org/stable/c/6c81f1c7812c61f187bed1b938f1d2e391d503ab URL:https://git.kernel.org/stable/c/6c81f1c7812c61f187bed1b938f1d2e391d503ab MISC:https://git.kernel.org/stable/c/72275c888f8962b406ee9c6885c79bf68cca5a63 URL:https://git.kernel.org/stable/c/72275c888f8962b406ee9c6885c79bf68cca5a63
Assigning CNA
kernel.org
Date Record Created
20250416	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20250416)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)