CVE-2025-38306

A flaw was found in the Linux kernel. A local attacker with low privileges could exploit a race condition in the has_locked_children() function within fs/fhandle.c. This could lead to a system crash, resulting in a Denial of Service (DoS).

This vulnerability is rated as a Moderate impact rather than Important because triggering the flaw requires local system access and precise race condition timing, limiting the blast radius strictly to a denial of service. Under concurrent mount modifications, a local user attempting file-handle operations can trigger an unhandled kernel null dereference or race that crashes the system. Earlier enterprise releases are not vulnerable as the underlying code that introduced this synchronization issue is not present.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.