What’s Vulnerable › Vulnerabilities

CVE-2025-38101: ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set()

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-07-03 · updated 2026-07-30
• Weakness: CWE-787

Description

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set() Enlarge the critical section in ring_buffer_subbuf_order_set() to ensure that error handling takes place with per-buffer mutex held, thus preventing list corruption and other concurrency-related issues.

Affected products

• Linux kernel: from 6.8 before 6.12.34; from 6.13 before 6.15.3 — fixed in 6.12.34, 6.15.3

How to fix

Upgrade to a fixed version: Linux kernel 6.12.34, 6.15.3. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/0fc9a295cd8e59c3636e97395e7c74a9c89fee42
• https://git.kernel.org/stable/c/40ee2afafc1d9fe3aa44a6fbe440d78a5c96a72e
• https://git.kernel.org/stable/c/e09c0600beea469b3ebf974464e526a02d59ad62

Get alerted when CVE-2025-38101 or the next vulnerability affects your stack