ZDF
Sign inSign up

Vulnerabilities

Vulnerability · CVE-2025-38616

In the Linux kernel, the following vulnerability has been resolved: tls: handle data disappearing from under the TLS ULP TLS expects that it owns the receive queue of the TCP socke

Published Aug 22, 2025 · catalog updated Aug 27, 2026 · Linux Linux

Check this week

CVE-2025-38616 is not in CISA KEV. FIRST estimates a 20.00% chance of exploitation in the next 30 days. Check whether you run Linux Linux.

Gaps on this record

  • No vendor fix or required action is stored. Compare the linked advisory before you change production.
Severity
High7.8
Known exploitation
Not in CISA/VulnCheck KEV
EPSS
20.00%
Remediation
Version ranges on file
Affected products
vendor Linux Linux 84c61fe1a75b4255df1e1e7c054c9e6d048da417 <db3658a12d5ec4db7185ae7476151a50521b7207

In the Linux kernel, the following vulnerability has been resolved: tls: handle data disappearing from under the TLS ULP TLS expects that it owns the receive queue of the TCP socket. This cannot be guaranteed in case the reader of the TCP socket entered before the TLS ULP was installed, or uses some non-standard read API (eg. zerocopy ones). Replace the WARN_ON() and a buggy early exit (which leaves anchor pointing to a freed skb) with real error handling. Wipe the parsing state and tell the reader to retry. We already reload the anchor every time we (re)acquire the socket lock, so the only co

Are you affected?

Enter the version you run. The result uses only the ranges stored on this record.

The check returns affected, not affected, or incomplete. It does not guess a version that is missing from the record.

  • vendor Linux Linux 84c61fe1a75b4255df1e1e7c054c9e6d048da417 <db3658a12d5ec4db7185ae7476151a50521b720784c61fe1a75b4255df1e1e7c054c9e6d048da417 <db3658a12d5ec4db7185ae7476151a50521b7207

How to fix CVE-2025-38616

What to do

Three questions, each answered from this record only. Confirm the vendor advisory before you patch.

Should you patch?

CVE-2025-38616 is not in CISA KEV. FIRST estimates a 20.00% chance of exploitation in the next 30 days. Check whether you run Linux Linux.

Which versions are affected?

Compare what you have installed with Linux Linux 84c61fe1a75b4255df1e1e7c054c9e6d048da417 <db3658a12d5ec4db7185ae7476151a50521b7207 84c61fe1a75b4255df1e1e7c054c9e6d048da417 <db3658a12d5ec4db7185ae7476151a50521b7207. Compare the installed version with the linked vendor advisory before you change production.

What should an analyst verify?

No weakness class is stored. EPSS 20.00%. There is no CISA KEV listing. No Exploit-DB or Metasploit reference is linked. Use the source links for the original advisory.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Aug 22, 2025 · EUVD

    Detected

    In the Linux kernel, the following vulnerability has been resolved: tls: handle data disappearing from under the TLS ULP TLS expects that it owns the receive queue of the TCP socket. This cannot be guaranteed in case the reader of the TCP socket entered before the TLS ULP was installed, or uses some non-standard read API (eg. zerocopy ones). Replace the WARN_ON() and a buggy early exit (which leav

  2. Aug 27, 2026 · EUVD

    Updated

    In the Linux kernel, the following vulnerability has been resolved: tls: handle data disappearing from under the TLS ULP TLS expects that it owns the receive queue of the TCP socket. This cannot be guaranteed in case the reader of the TCP socket entered before the TLS ULP was installed, or uses some non-standard read API (eg. zerocopy ones). Replace the WARN_ON() and a buggy early exit (which leav

Sources

  • CVE.orgVulnerability recordCVE-2025-38616

    Official CVE identifier

    cve.org
  • EUVDVulnerability recordEUVD-2025-26087

    In the Linux kernel, the following vulnerability has been resolved: tls: handle data disappearing from under the TLS ULP TLS expects that it owns the receive queue of the TCP socket. This cannot be guaranteed in case the reader of the TCP socket entered before the TLS ULP was ins

    euvd.enisa.europa.eu

References

Freshness

Last verified in this catalog Aug 27, 2026. Significant claims (KEV, EPSS, CVSS, affected ranges) come from the source rows above — open the original publisher for the authoritative advisory.