Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability
High Listed in CISA KEV
Summary
Linux kernel contains a time-of-check time-of-use (TOCTOU) race condition vulnerability that has a high impact on confidentiality, integrity, and availability.
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- Linux:Kernel
Sources
- CISA KEV DATABASE
Original Links
- https://nvd.nist.gov/vuln/detail/CVE-2025-38352 advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog kev
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=2c72fe18cc5f9f1750f5bc148cf1c94c29e106ff reference
- https://source.android.com/docs/security/bulletin/2025-09-01 reference
Timeline
- kev_added CISA KEV
- kev_ingest CISA KEV