Security tracker / CVE-2025-38349

CVE-2025-38349

eventpoll: don't decrement ep refcount while still holding the ep mutex

References

• Debian security tracker
• cve.org
• https://project-zero.issues.chromium.org/issues/430541637

Notes

 carnil> Vulnerable versions: 6.4.

Bugs

Status

Branch	Status
upstream	released (6.16-rc6) [8c2e52ebbe885c7eeaabd3b7ddcdc1246fc400d2]
7.0-upstream-stable	N/A "Fixed before branching point"
6.18-upstream-stable	N/A "Fixed before branching point"
6.15-upstream-stable	released (6.15.7) [605c18698ecfa99165f36b7f59d3ed503e169814]
6.12-upstream-stable	released (6.12.39) [6dee745bd0aec9d399df674256e7b1ecdb615444]
6.6-upstream-stable	released (6.6.99) [521e9ff0b67c66a17d6f9593dfccafaa984aae4c]
6.1-upstream-stable	needed
5.10-upstream-stable	N/A "Vulnerable code not present"
sid	released (6.16.3-1)
6.12-trixie-security	released (6.12.41-1)
6.1-bookworm-security	N/A "Vulnerable code not present"
5.10-bullseye-security	N/A "Vulnerable code not present"