CVE-2025-38003

In the Linux kernel, the following vulnerability has been resolved:

can: bcm: add missing rcu read protection for procfs content

When the procfs content is generated for a bcm_op which is in the process to be removed the procfs output might show unreliable data (UAF).

As the removal of bcm_op's is already implemented with rcu handling this patch adds the missing rcu_read_lock() and makes sure the list entries are properly removed under rcu protection.

This vulnerability is rated as Moderate impact because exploitation requires local system access to trigger concurrent operations on CAN broadcast manager sockets and procfs entries, limiting the blast radius primarily to a local denial of service. The CAN protocol family and its broadcast manager are specialized networking subsystems that are typically not utilized in standard enterprise server environments. While unprivileged users may open CAN sockets if user namespaces are available, triggering the race condition to cause a kernel crash requires precise timing during socket teardown and concurrent procfs inspection.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.