CVE-2025-38236: af_unix: Don't leave consecutive consumed OOB skbs.
afunix: Don't leave consecutive consumed OOB skbs.
Other sources
In unixstreamrecvurg of afunix.c, there is a possible way to achieve code execution due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
— OSV
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:linux_kernel:to a version that resolves this vulnerability.Fixed in :2025-12-05 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38236?
CVE-2025-38236 is classified as a use-after-free vulnerability in the Linux kernel.
How do I fix CVE-2025-38236?
To resolve CVE-2025-38236, update your Linux kernel to the latest stable version where the vulnerability has been patched.
What is the impact of CVE-2025-38236?
The impact of CVE-2025-38236 includes potential unauthorized access and exploitation of system memory.
Which versions of Linux are affected by CVE-2025-38236?
CVE-2025-38236 affects specific versions of the Linux kernel that are stated in the security advisories.
Is CVE-2025-38236 an active threat?
CVE-2025-38236 can pose a risk if systems are not updated, as it may allow attackers to exploit the vulnerability.