Search/CVE-2025-38443

● CVE — High

CVE-2025-38443

Vendordebian, linuxProductdebian linux, linux kernelDiscoveredJul 25, 2025UpdatedDec 22, 2025

In the Linux kernel, the following vulnerability has been resolved: nbd: fix uaf in nbd_genl_connect() error path There is a use-after-free issue in nbd: block nbd6: Receive control failed (result -104) block nbd6: shutting down sockets ================================================================== BUG: KASAN: slab-use-after-free in recv_work+0x694/0xa80 drivers/block/nbd.c:1022 Write of size 4 at addr ffff8880295de478 by task kworker/u33:0/67 CPU: 2 UID: 0 PID: 67 Comm: kworker/u33:0 Not tainted 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 Workqueue: nbd6-recv recv_work Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120…

View graph Watch Export

CVSS v3.1

7.8 HIGH

EPSS

0.18%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

Related IOCs

seen in the same coverage

EPSS Trend

Aug 16, 2026 → Oct 27, 2026

▲ 0.03pp

0.15% → 0.18% over 5 tracked changes

CVSS v3.1 Detail

Attack VectorLOCAL

Attack ComplexityLOW

Privileges RequiredLOW

User InteractionNONE

ScopeUNCHANGED

ConfidentialityHIGH

IntegrityHIGH

AvailabilityHIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Connections

34 relationships

Timeline

disclosure → media coverage

Jul 25, 2025

Disclosure — published as a CVE record. · last revised by NVD Dec 22, 2025

Sep 25, 2025

ubuntu.com reports: USN-7774-1: Linux kernel vulnerabilities

Sep 25, 2025

ubuntu.com reports: USN-7774-2: Linux kernel (FIPS) vulnerabilities

Sep 25, 2025

ubuntu.com reports: USN-7774-3: Linux kernel (Real-time) vulnerabilities

Sep 25, 2025

ubuntu.com reports: USN-7775-1: Linux kernel (Azure FIPS) vulnerabilities

Sep 25, 2025

ubuntu.com reports: USN-7776-1: Linux kernel (Oracle) vulnerabilities

Sep 26, 2025

ubuntu.com reports: USN-7775-2: Linux kernel (Azure) vulnerabilities

Oct 1, 2025

ubuntu.com reports: USN-7775-3: Linux kernel (Azure) vulnerabilities

Oct 1, 2025

ubuntu.com reports: USN-7774-4: Linux kernel (KVM) vulnerabilities

Oct 6, 2025

ubuntu.com reports: USN-7774-5: Linux kernel (NVIDIA Tegra IGX) vulnerabilities

Nov 21, 2025

ubuntu.com reports: USN-7879-1: Linux kernel vulnerabilities

Nov 21, 2025

ubuntu.com reports: USN-7879-2: Linux kernel (Real-time) vulnerabilities

Nov 21, 2025

ubuntu.com reports: USN-7880-1: Linux kernel (OEM) vulnerabilities

Nov 26, 2025

ubuntu.com reports: USN-7879-3: Linux kernel vulnerabilities

Dec 4, 2025

ubuntu.com reports: USN-7879-4: Linux kernel vulnerabilities

Dec 15, 2025

ubuntu.com reports: USN-7934-1: Linux kernel (Azure) vulnerabilities

Feb 11, 2026

ubuntu.com reports: USN-8028-1: Linux kernel vulnerabilities

Feb 12, 2026

ubuntu.com reports: USN-8028-2: Linux kernel (Real-time) vulnerabilities

Feb 12, 2026

ubuntu.com reports: USN-8031-1: Linux kernel (GCP) vulnerabilities

Feb 17, 2026

ubuntu.com reports: USN-8028-3: Linux kernel (Real-time) vulnerabilities

Feb 17, 2026

ubuntu.com reports: USN-8028-4: Linux kernel (FIPS) vulnerabilities

Feb 17, 2026

ubuntu.com reports: USN-8028-5: Linux kernel vulnerabilities

Feb 18, 2026

ubuntu.com reports: USN-8031-2: Linux kernel (GCP FIPS) vulnerabilities

Feb 19, 2026

ubuntu.com reports: USN-8028-6: Linux kernel (HWE) vulnerabilities

Feb 19, 2026

ubuntu.com reports: USN-8031-3: Linux kernel vulnerabilities

Feb 19, 2026

ubuntu.com reports: USN-8052-1: Linux kernel (Low Latency) vulnerabilities

Feb 19, 2026

ubuntu.com reports: USN-8028-7: Linux kernel (Low Latency NVIDIA) vulnerabilities