CVE-2025-38464

Q: What is the severity of CVE-2025-38464?

CVE-2025-38464 has a CVSS score of 7.8 (HIGH). A use-after-free vulnerability in the Linux kernel's TIPC (Transparent Inter-Process Communication) subsystem allows local attackers to cause a kernel crash or potentially execute arbitrary code. This affects Linux systems with TIPC enabled, particularly during network namespace cleanup operations.

7.8 HIGH

Denial of Service

📋 TL;DR

A use-after-free vulnerability in the Linux kernel's TIPC (Transparent Inter-Process Communication) subsystem allows local attackers to cause a kernel crash or potentially execute arbitrary code. This affects Linux systems with TIPC enabled, particularly during network namespace cleanup operations.

💻 Affected Systems

Products:

Linux kernel

Versions: Specific affected versions not specified in CVE, but references indicate multiple stable branches were patched.

Operating Systems: Linux distributions using vulnerable kernel versions

Default Config Vulnerable: ✅ No

Notes: Only affects systems with TIPC protocol enabled. Many distributions disable TIPC by default.

📦 What is this software?

Debian Linux by Debian

View all CVEs affecting Debian Linux →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

⚠️ Risk & Real-World Impact

🔴

Worst Case

Local privilege escalation to kernel-level code execution, leading to complete system compromise.

🟠

Likely Case

Kernel panic or system crash causing denial of service.

🟢

If Mitigated

Limited to denial of service if exploit attempts fail or system has additional protections.

🌐 Internet-Facing: LOW - Requires local access to the system.

🏢 Internal Only: MEDIUM - Local attackers or malicious users could exploit this vulnerability.

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: UNKNOWN

Unauthenticated Exploit: ✅ No

Complexity: MEDIUM

Requires local access and knowledge of triggering conditions during netns dismantle.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Multiple stable kernel versions with commits: 03dcdd2558e1e55bf843822fe4363dcb48743f2b, 15a6f4971e2f157d57e09ea748d1fbc714277aa4, 1dbf7cd2454a28b1da700085b99346b5445aeabb, 3b89e17b2fd64012682bed158d9eb3d2e96dec42, 50aa2d121bc2cfe2d825f8a331ea75dfaaab6a50

Vendor Advisory: https://git.kernel.org/stable/c/

Restart Required: Yes

Instructions:

1. Update Linux kernel to patched version from your distribution vendor. 2. Reboot system to load new kernel.

🔧 Temporary Workarounds

Disable TIPC module

linux

Prevent loading of TIPC kernel module if not required.

echo 'install tipc /bin/false' >> /etc/modprobe.d/disable-tipc.conf
rmmod tipc

🧯 If You Can't Patch

Disable TIPC protocol if not needed
Restrict local user access and monitor for suspicious activity

🔍 How to Verify

Check if Vulnerable:

Check if TIPC module is loaded: lsmod | grep tipc

Check Version:

uname -r

Verify Fix Applied:

Check kernel version against patched versions from your distribution vendor

📡 Detection & Monitoring

Log Indicators:

Kernel panic messages
KASAN use-after-free reports in dmesg
System crashes during network namespace operations

Network Indicators:

Unusual local process behavior attempting to trigger netns cleanup

SIEM Query:

source="kernel" AND ("KASAN" OR "use-after-free" OR "tipc_conn_close")

📊 Metadata

CVE ID: CVE-2025-38464

CVSS v3 Score: 7.8 (HIGH)

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE: CWE-416

EPSS Score: 0.02% exploit probability (3.6th percentile)

Published: July 25, 2025

Last Updated: December 22, 2025

📋 TL;DR

💻 Affected Systems

📦 What is this software?

Debian Linux by Debian

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

Linux Kernel by Linux

⚠️ Risk & Real-World Impact

Worst Case

Likely Case

If Mitigated

🎯 Exploit Status

🛠️ Fix & Mitigation

✅ Official Fix

Instructions:

🔧 Temporary Workarounds

Disable TIPC module

🧯 If You Can't Patch

🔍 How to Verify

Check if Vulnerable:

Check Version:

Verify Fix Applied:

📡 Detection & Monitoring

Log Indicators:

Network Indicators:

SIEM Query:

📊 Metadata

🔗 References

📤 Share & Export

🔗 Related Vulnerabilities