CVE-2025-38617

A flaw was found in the Linux kernel's packet socket subsystem. This flaw allows a local attacker with administrative privileges to cause a Denial of Service (DoS) by triggering a kernel crash. The issue occurs due to a race condition when socket ring buffer setup and network device notification handlers interact concurrently.

This race condition in af_packet could allow a local privileged attacker to trigger a kernel crash when packet_set_ring() and packet_notifier() interact concurrently. The issue requires high privileges because only processes with CAP_NET_ADMIN can configure packet sockets with ring buffers. While the flaw does not impact confidentiality or integrity, it could lead to a denial of service through kernel panic. PR:H applies because configuring AF_PACKET ring buffers requires CAP_NET_ADMIN privileges, meaning only highly privileged users can reach the vulnerable code paths.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.