SUSE CVE-2025-38352

🗓️ 23 Jul 2025 23:23:20Reported by Suse CVEType

Linux kernel fixes a race between handle_posix_cpu_timers and posix_cpu_timer_del via exit_state check in run_posix_cpu_timers.

Reporter	Title	Published	Views	Family All 608
GithubExploit	Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Linux Linux_Kernel	19 Jan 202601:22	–	githubexploit
GithubExploit	Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Linux Linux_Kernel	3 Jan 202616:52	–	githubexploit
GithubExploit	lpe-toolkit	21 May 202619:33	–	githubexploit
GithubExploit	Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Linux Linux_Kernel	2 Jun 202615:13	–	githubexploit
GithubExploit	Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Linux Linux_Kernel	24 Feb 202605:25	–	githubexploit
GithubExploit	Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Linux Linux_Kernel	13 Sep 202610:12	–	githubexploit
GithubExploit	Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Linux Linux_Kernel	30 May 202602:37	–	githubexploit
GithubExploit	Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Linux Linux_Kernel	8 Jan 202614:14	–	githubexploit
IBM Security Bulletins	Security Bulletin: IBM TXSeries for Multiplatforms is affected by a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability & a use-after-free (UAF) vulnerability found in Linux kernel packages.	9 Oct 202511:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM CICS TX Standard is affected by a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability & a use-after-free (UAF) vulnerability found in Linux kernel packages.	14 Oct 202509:15	–	ibm

OS	OS Version	Architecture	Package	Package Version	Filename
OpenSUSE Leap	15.6	noarch	cluster-md-kmp-64kb	6.4.0-150600.23.65.1	cluster-md-kmp-64kb-6.4.0-150600.23.65.1.noarch.rpm
OpenSUSE Leap	16.0	noarch	cluster-md-kmp-64kb	6.12.0-160000.6.1	cluster-md-kmp-64kb-6.12.0-160000.6.1.noarch.rpm
OpenSUSE Leap	15.6	noarch	cluster-md-kmp-azure	6.4.0-150600.8.48.1	cluster-md-kmp-azure-6.4.0-150600.8.48.1.noarch.rpm
SUSE Linux Enterprise Server	12.5	noarch	cluster-md-kmp-default	4.12.14-122.272.1	cluster-md-kmp-default-4.12.14-122.272.1.noarch.rpm
SUSE Linux Enterprise Server	15.3	noarch	cluster-md-kmp-default	5.3.18-150300.59.218.1	cluster-md-kmp-default-5.3.18-150300.59.218.1.noarch.rpm
SUSE Linux Enterprise Server	15.4	noarch	cluster-md-kmp-default	5.14.21-150400.24.176.1	cluster-md-kmp-default-5.14.21-150400.24.176.1.noarch.rpm
SUSE Linux Enterprise Server	15.5	noarch	cluster-md-kmp-default	5.14.21-150500.55.121.2	cluster-md-kmp-default-5.14.21-150500.55.121.2.noarch.rpm
SUSE Linux Enterprise Server for SAP applications	15.5	noarch	cluster-md-kmp-default	5.14.21-150500.55.121.2	cluster-md-kmp-default-5.14.21-150500.55.121.2.noarch.rpm
OpenSUSE Leap	15.6	noarch	cluster-md-kmp-default	6.4.0-150600.23.65.1	cluster-md-kmp-default-6.4.0-150600.23.65.1.noarch.rpm
SUSE Linux Enterprise Server	15.6	noarch	cluster-md-kmp-default	6.4.0-150600.23.65.1	cluster-md-kmp-default-6.4.0-150600.23.65.1.noarch.rpm

Source	Link
suse	www.suse.com/security/cve/CVE-2025-38352
suse	www.suse.com/support/security/rating/
bugzilla	www.bugzilla.suse.com/1246911
bugzilla	www.bugzilla.suse.com/1249205
bugzilla	www.bugzilla.suse.com/1253291
lists	www.lists.suse.com/pipermail/suse-liberty-linux-updates/2025-September/002049.html
lists	www.lists.suse.com/pipermail/suse-liberty-linux-updates/2025-September/001992.html
lists	www.lists.suse.com/pipermail/suse-liberty-linux-updates/2025-September/001998.html
lists	www.lists.suse.com/pipermail/suse-liberty-linux-updates/2025-September/001995.html
lists	www.lists.suse.com/pipermail/sle-updates/2025-August/041255.html

29 Aug 2026 01:19Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.17

EPSS0.01254