CVE-2025-38352
Publication date 22 July 2025
Last updated 10 September 2026
Ubuntu priority
Description
In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() If an exiting non-autoreaping task has already passed exit_notify() and calls handle_posix_cpu_timers() from IRQ, it can be reaped by its parent or debugger right after unlock_task_sighand(). If a concurrent posix_cpu_timer_del() runs at that moment, it won't be able to detect timer->it.cpu.firing != 0: cpu_timer_task_rcu() and/or lock_task_sighand() will fail. Add the tsk->exit_state check into run_posix_cpu_timers() to fix this. This fix is not needed if CONFIG_POSIX_CPU_TIMERS_TASK_WORK=y, because exit_task_work() is called before exit_notify(). But the check still makes sense, task_work_add(&tsk->posix_cputimers_work.work) will fail anyway in this case.
Why is this CVE high priority?
This TOC-TOU issue is active CVE in CISA KEV
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| linux | 26.04 LTS resolute |
Not affected
|
| 24.04 LTS noble |
Fixed 6.8.0-87.88
|
|
| 22.04 LTS jammy |
Fixed 5.15.0-156.166
|
|
| 20.04 LTS focal |
Fixed 5.4.0-223.243
|
|
| 18.04 LTS bionic |
Fixed 4.15.0-243.255
|
|
| 16.04 LTS xenial |
Fixed 4.4.0-274.308
|
|
| 14.04 LTS trusty |
Fixed 3.13.0-210.261
|
|
| linux-hwe | 26.04 LTS resolute | Not in release |
| 24.04 LTS noble | Not in release | |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Not in release | |
| 18.04 LTS bionic | Ignored end of standard support | |
| 16.04 LTS xenial |
Fixed 4.15.0-243.255~16.04.1
|
|
| 14.04 LTS trusty | Not in release | |
| linux-hwe-5.4 | 26.04 LTS resolute | Not in release |
| 24.04 LTS noble | Not in release | |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Not in release | |
| 18.04 LTS bionic |
Fixed 5.4.0-223.243~18.04.1
|
|
| 16.04 LTS xenial | Not in release | |
| 14.04 LTS trusty | Not in release | |
| linux-hwe-5.15 | 26.04 LTS resolute | Not in release |
| 24.04 LTS noble | Not in release | |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal |
Fixed 5.15.0-156.166~20.04.1
|
|
| 18.04 LTS bionic | Not in release | |
| 16.04 LTS xenial | Not in release | |
| 14.04 LTS trusty | Not in release | |
| linux-hwe-6.8 | 26.04 LTS resolute | Not in release |
| 24.04 LTS noble | Not in release | |
| 22.04 LTS jammy |
Fixed 6.8.0-87.88~22.04.1
|
|
| 20.04 LTS focal | Not in release | |
| 18.04 LTS bionic | Not in release | |
| 16.04 LTS xenial | Not in release | |
| 14.04 LTS trusty | Not in release | |
| linux-hwe-6.11 | 26.04 LTS resolute | Not in release |
| 24.04 LTS noble | Ignored superseded by linux-hwe-6.14, was needs-triage | |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Not in release | |
| 18.04 LTS bionic | Not in release | |
| 16.04 LTS xenial | Not in release | |
| 14.04 LTS trusty | Not in release | |
| linux-lts-xenial | 26.04 LTS resolute | Not in release |
| 24.04 LTS noble | Not in release | |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Not in release | |
| 18.04 LTS bionic | Not in release | |
| 16.04 LTS xenial | Not in release | |
| 14.04 LTS trusty |
Fixed 4.4.0-274.308~14.04.1
|
|
| linux-kvm | 26.04 LTS resolute | Not in release |
| 24.04 LTS noble | Not in release | |
| 22.04 LTS jammy |
Fixed 5.15.0-1088.93
|
|
| 20.04 LTS focal |
Fixed 5.4.0-1139.148
|
|
| 18.04 LTS bionic |
Fixed 4.15.0-1168.173
|
|
| 16.04 LTS xenial |
Fixed 4.4.0-1150.161
|
|
| 14.04 LTS trusty | Not in release | |
| linux-aws | 26.04 LTS resolute |
Not affected
|
| 24.04 LTS noble |
Fixed 6.8.0-1042.44
|
|
| 22.04 LTS jammy |
Fixed 5.15.0-1092.99
|
|
| 20.04 LTS focal |
Fixed 5.4.0-1152.162
|
|
| 18.04 LTS bionic |
Fixed 4.15.0-1186.199
|
|
| 16.04 LTS xenial |
Fixed 4.4.0-1187.202
|
|
| 14.04 LTS trusty |
Fixed 4.4.0-1149.155
|
|
| linux-aws-5.4 | 26.04 LTS resolute | Not in release |
| 24.04 LTS noble | Not in release | |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal | Not in release | |
| 18.04 LTS bionic |
Fixed 5.4.0-1152.162~18.04.1
|
|
| 16.04 LTS xenial | Not in release | |
| 14.04 LTS trusty | Not in release | |
| linux-aws-5.15 | 26.04 LTS resolute | Not in release |
| 24.04 LTS noble | Not in release | |
| 22.04 LTS jammy | Not in release | |
| 20.04 LTS focal |
Fixed 5.15.0-1092.99~20.04.1
|
|
| 18.04 LTS bionic | Not in release |