CVE-2025-38717

net: kcm: Fix race condition in kcm_unattach()

References

Notes

 carnil> Introduced in ab7ac4eb9832 ("kcm: Kernel Connection Multiplexor module").
 carnil> Vulnerable versions: 4.6.

Bugs

Status

Branch Status
upstream released (6.17-rc2) [52565a935213cd6a8662ddb8efe5b4219343a25d]
6.18-upstream-stable N/A "Fixed before branching point"
6.17-upstream-stable N/A "Fixed before branching point"
6.16-upstream-stable released (6.16.2) [798733ee5d5788b12e8a52db1519abc17e826f69]
6.15-upstream-stable released (6.15.11) [7275dc3bb8f91b23125ff3f47b6529935cf46152]
6.12-upstream-stable released (6.12.43) [c0bffbc92a1ca3960fb9cdb8e9f75a68468eb308]
6.6-upstream-stable needed
6.1-upstream-stable needed
5.10-upstream-stable needed
sid released (6.16.3-1)
6.12-trixie-security released (6.12.43-1)
6.1-bookworm-security needed
5.10-bullseye-security needed