NetSight
IP …
high7.8

CVE-2025-38653

In the Linux kernel, the following vulnerability has been resolved: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al Check pde…

Impact

In the Linux kernel, the following vulnerability has been resolved: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al Check pde->proc_ops->proc_lseek directly may cause UAF in rmmod scenario. It's a gap in proc_reg_open() after commit 654b33ada4ab("proc: fix UAF in proc_get_inode()"). Followed by AI Viro's suggestion, fix it in same manner.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 6.0 before 6.1.148
from 6.2 before 6.6.102
from 6.7 before 6.12.42
from 6.13 before 6.15.10
from 6.16 before 6.16.1
DebianDebian Linux
Version 11.0

Weakness classification

CWE-416

References