cve 2025 38245

About this tag
CVE-2025-38245 is a race condition vulnerability in the Linux kernel's ATM (Asynchronous Transfer Mode) driver. The issue occurs during device deregistration when procfs entries could be double-registered due to a missing lock. The fix ensures that atm_dev_mutex is held until procfs and sysfs entries are fully removed. This vulnerability was discovered through syzbot testing and has been patched upstream. While the tag is specific to a Linux kernel issue, WindowsForum.com users interested in cross-platform security, kernel vulnerabilities, or general CVE tracking may find this discussion relevant.
  1. Linux ATM Driver Race Fixed: Hold atm_dev_mutex During Procfs Cleanup

    A subtle race in the Linux kernel’s ATM driver that left a small window where procfs entries could be double-registered has been cataloged as CVE-2025-38245 and fixed upstream with a small but important ordering change: make sure the atm_dev_mutex is held until procfs/sysfs entries are fully...