vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2025-38101

ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set()

HIGH
7.8
CVSS Score
Published: July 3, 2025 at 08:35 AM UTC
Updated: August 5, 2026 at 12:44 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
HIGH7.8
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set() Enlarge the critical section in ring_buffer_subbuf_order_set() to ensure that error handling takes place with per-buffer mutex held, thus preventing list corruption and other concurrency-related issues.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
95%
6.13 ≤ v < 6.15.36.8 ≤ v < 6.12.346.8 ≤ v < 6.15.36.8 ≤ v < 6.166.8f9b94daa542a8d2532f0930f01cd9aec2d19621b
Vendor states this is fixed in 0fc9a295cd8e59c3636e97395e7c74a9c89fee42 (fixed)
Vendor states this is fixed in 40ee2afafc1d9fe3aa44a6fbe440d78a5c96a72e (fixed)
Vendor states this is fixed in e09c0600beea469b3ebf974464e526a02d59ad62 (fixed)
Vendor states this is fixed in 6.12.34 (unaffected)
Vendor states this is fixed in 6.15.3 (unaffected)
Vendor states this is fixed in 6.16 (unaffected)
Vendor states this is fixed in 6.8 (unaffected)

References (3)

Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/0fc9a295cd8e59c3636e97395e7c74a9c89fee42
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/40ee2afafc1d9fe3aa44a6fbe440d78a5c96a72e
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/e09c0600beea469b3ebf974464e526a02d59ad62

CVSS

7.8HIGHLinux
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-787

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card