GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2025-38313 (GCVE-0-2025-38313)

Vulnerability from cvelistv5 – Published: 2025-07-10 07:42 – Updated: 2026-05-11 21:25
VLAI
Title
bus: fsl-mc: fix double-free on mc_dev
Summary
In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc: fix double-free on mc_dev The blamed commit tried to simplify how the deallocations are done but, in the process, introduced a double-free on the mc_dev variable. In case the MC device is a DPRC, a new mc_bus is allocated and the mc_dev variable is just a reference to one of its fields. In this circumstance, on the error path only the mc_bus should be freed. This commit introduces back the following checkpatch warning which is a false-positive. WARNING: kfree(NULL) is safe and this check is probably not required + if (mc_bus) + kfree(mc_bus);
Severity
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: a042fbed02904493ae6df26ec836045f5a7d3ce2 , < 12e4431e5078847791936820bd39df9e1ee26d2e (git)
Affected: a042fbed02904493ae6df26ec836045f5a7d3ce2 , < 3135e03a92f6b5259d0a7f25f728e9e7866ede3f (git)
Affected: a042fbed02904493ae6df26ec836045f5a7d3ce2 , < 7002b954c4a8b9965ba0f139812ee4a6f71beac8 (git)
Affected: a042fbed02904493ae6df26ec836045f5a7d3ce2 , < b2057374f326303c86d8423415ab58656eebc695 (git)
Affected: a042fbed02904493ae6df26ec836045f5a7d3ce2 , < 4b23c46eb2d88924b93aca647bde9a4b9cf62cf9 (git)
Affected: a042fbed02904493ae6df26ec836045f5a7d3ce2 , < 1d5baab39e5b09a76870b345cdee7933871b881f (git)
Affected: a042fbed02904493ae6df26ec836045f5a7d3ce2 , < 873d47114fd5e5a1cad2018843671537cc71ac84 (git)
Affected: a042fbed02904493ae6df26ec836045f5a7d3ce2 , < d694bf8a9acdbd061596f3e7549bc8cb70750a60 (git)
guessed Create a notification for this product.
Linux Linux Affected: 4.13
Unaffected: 0 , < 4.13 (semver)
Unaffected: 5.4.295 , ≤ 5.4.* (semver)
Unaffected: 5.10.239 , ≤ 5.10.* (semver)
Unaffected: 5.15.186 , ≤ 5.15.* (semver)
Unaffected: 6.1.142 , ≤ 6.1.* (semver)
Unaffected: 6.6.94 , ≤ 6.6.* (semver)
Unaffected: 6.12.34 , ≤ 6.12.* (semver)
Unaffected: 6.15.3 , ≤ 6.15.* (semver)
Unaffected: 6.16 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T17:36:27.591Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/bus/fsl-mc/fsl-mc-bus.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "12e4431e5078847791936820bd39df9e1ee26d2e",
              "status": "affected",
              "version": "a042fbed02904493ae6df26ec836045f5a7d3ce2",
              "versionType": "git"
            },
            {
              "lessThan": "3135e03a92f6b5259d0a7f25f728e9e7866ede3f",
              "status": "affected",
              "version": "a042fbed02904493ae6df26ec836045f5a7d3ce2",
              "versionType": "git"
            },
            {
              "lessThan": "7002b954c4a8b9965ba0f139812ee4a6f71beac8",
              "status": "affected",
              "version": "a042fbed02904493ae6df26ec836045f5a7d3ce2",
              "versionType": "git"
            },
            {
              "lessThan": "b2057374f326303c86d8423415ab58656eebc695",
              "status": "affected",
              "version": "a042fbed02904493ae6df26ec836045f5a7d3ce2",
              "versionType": "git"
            },
            {
              "lessThan": "4b23c46eb2d88924b93aca647bde9a4b9cf62cf9",
              "status": "affected",
              "version": "a042fbed02904493ae6df26ec836045f5a7d3ce2",
              "versionType": "git"
            },
            {
              "lessThan": "1d5baab39e5b09a76870b345cdee7933871b881f",
              "status": "affected",
              "version": "a042fbed02904493ae6df26ec836045f5a7d3ce2",
              "versionType": "git"
            },
            {
              "lessThan": "873d47114fd5e5a1cad2018843671537cc71ac84",
              "status": "affected",
              "version": "a042fbed02904493ae6df26ec836045f5a7d3ce2",
              "versionType": "git"
            },
            {
              "lessThan": "d694bf8a9acdbd061596f3e7549bc8cb70750a60",
              "status": "affected",
              "version": "a042fbed02904493ae6df26ec836045f5a7d3ce2",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/bus/fsl-mc/fsl-mc-bus.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.13"
            },
            {
              "lessThan": "4.13",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.295",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.239",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.186",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.142",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.94",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.34",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.15.*",
              "status": "unaffected",
              "version": "6.15.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.16",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.295",
                  "versionStartIncluding": "4.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.239",
                  "versionStartIncluding": "4.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.186",
                  "versionStartIncluding": "4.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.142",
                  "versionStartIncluding": "4.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.94",
                  "versionStartIncluding": "4.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.34",
                  "versionStartIncluding": "4.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.15.3",
                  "versionStartIncluding": "4.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.16",
                  "versionStartIncluding": "4.13",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbus: fsl-mc: fix double-free on mc_dev\n\nThe blamed commit tried to simplify how the deallocations are done but,\nin the process, introduced a double-free on the mc_dev variable.\n\nIn case the MC device is a DPRC, a new mc_bus is allocated and the\nmc_dev variable is just a reference to one of its fields. In this\ncircumstance, on the error path only the mc_bus should be freed.\n\nThis commit introduces back the following checkpatch warning which is a\nfalse-positive.\n\nWARNING: kfree(NULL) is safe and this check is probably not required\n+       if (mc_bus)\n+               kfree(mc_bus);"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T21:25:33.799Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/12e4431e5078847791936820bd39df9e1ee26d2e"
        },
        {
          "url": "https://git.kernel.org/stable/c/3135e03a92f6b5259d0a7f25f728e9e7866ede3f"
        },
        {
          "url": "https://git.kernel.org/stable/c/7002b954c4a8b9965ba0f139812ee4a6f71beac8"
        },
        {
          "url": "https://git.kernel.org/stable/c/b2057374f326303c86d8423415ab58656eebc695"
        },
        {
          "url": "https://git.kernel.org/stable/c/4b23c46eb2d88924b93aca647bde9a4b9cf62cf9"
        },
        {
          "url": "https://git.kernel.org/stable/c/1d5baab39e5b09a76870b345cdee7933871b881f"
        },
        {
          "url": "https://git.kernel.org/stable/c/873d47114fd5e5a1cad2018843671537cc71ac84"
        },
        {
          "url": "https://git.kernel.org/stable/c/d694bf8a9acdbd061596f3e7549bc8cb70750a60"
        }
      ],
      "title": "bus: fsl-mc: fix double-free on mc_dev",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2025-38313",
    "datePublished": "2025-07-10T07:42:21.314Z",
    "dateReserved": "2025-04-16T04:51:24.003Z",
    "dateUpdated": "2026-05-11T21:25:33.799Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2025-38313",
      "date": "2026-09-16",
      "epss": "0.00167",
      "percentile": "0.06355"
    },
    "microsoft_vex": {
      "current_release_date": "2026-02-18T15:10:30.000Z",
      "cve": "CVE-2025-38313",
      "id": "msrc_CVE-2025-38313",
      "initial_release_date": "2025-07-02T00:00:00.000Z",
      "product_status:fixed": "2",
      "product_status:known_affected": "2",
      "source": "Microsoft CSAF VEX",
      "status": "final",
      "title": "bus: fsl-mc: fix double-free on mc_dev",
      "url": "https://msrc.microsoft.com/csaf/vex/2025/msrc_cve-2025-38313.json",
      "version": "2"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2025-38313\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2025-07-10T08:15:30.240\",\"lastModified\":\"2026-06-17T09:16:36.130\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nbus: fsl-mc: fix double-free on mc_dev\\n\\nThe blamed commit tried to simplify how the deallocations are done but,\\nin the process, introduced a double-free on the mc_dev variable.\\n\\nIn case the MC device is a DPRC, a new mc_bus is allocated and the\\nmc_dev variable is just a reference to one of its fields. In this\\ncircumstance, on the error path only the mc_bus should be freed.\\n\\nThis commit introduces back the following checkpatch warning which is a\\nfalse-positive.\\n\\nWARNING: kfree(NULL) is safe and this check is probably not required\\n+       if (mc_bus)\\n+               kfree(mc_bus);\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: bus: fsl-mc: correcci\u00f3n de doble liberaci\u00f3n en mc_dev La confirmaci\u00f3n criticada intent\u00f3 simplificar c\u00f3mo se realizan las desasignaciones pero, en el proceso, introdujo una doble liberaci\u00f3n en la variable mc_dev. En caso de que el dispositivo MC sea un DPRC, se asigna un nuevo mc_bus y la variable mc_dev es solo una referencia a uno de sus campos. En esta circunstancia, en la ruta de error solo se debe liberar mc_bus. Esta confirmaci\u00f3n introduce de nuevo la siguiente advertencia checkpatch que es un falso positivo. ADVERTENCIA: kfree(NULL) es seguro y esta comprobaci\u00f3n probablemente no sea necesaria + if (mc_bus) + kfree(mc_bus);\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"drivers/bus/fsl-mc/fsl-mc-bus.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"a042fbed02904493ae6df26ec836045f5a7d3ce2\",\"lessThan\":\"12e4431e5078847791936820bd39df9e1ee26d2e\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"a042fbed02904493ae6df26ec836045f5a7d3ce2\",\"lessThan\":\"3135e03a92f6b5259d0a7f25f728e9e7866ede3f\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"a042fbed02904493ae6df26ec836045f5a7d3ce2\",\"lessThan\":\"7002b954c4a8b9965ba0f139812ee4a6f71beac8\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"a042fbed02904493ae6df26ec836045f5a7d3ce2\",\"lessThan\":\"b2057374f326303c86d8423415ab58656eebc695\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"a042fbed02904493ae6df26ec836045f5a7d3ce2\",\"lessThan\":\"4b23c46eb2d88924b93aca647bde9a4b9cf62cf9\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"a042fbed02904493ae6df26ec836045f5a7d3ce2\",\"lessThan\":\"1d5baab39e5b09a76870b345cdee7933871b881f\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"a042fbed02904493ae6df26ec836045f5a7d3ce2\",\"lessThan\":\"873d47114fd5e5a1cad2018843671537cc71ac84\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"a042fbed02904493ae6df26ec836045f5a7d3ce2\",\"lessThan\":\"d694bf8a9acdbd061596f3e7549bc8cb70750a60\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"drivers/bus/fsl-mc/fsl-mc-bus.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"4.13\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"4.13\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.4.295\",\"lessThanOrEqual\":\"5.4.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.239\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.186\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.142\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.94\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.34\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.15.3\",\"lessThanOrEqual\":\"6.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.16\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-415\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.13\",\"versionEndExcluding\":\"5.4.295\",\"matchCriteriaId\":\"DB284475-6DD2-493C-882E-C7D490E6B817\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.5\",\"versionEndExcluding\":\"5.10.239\",\"matchCriteriaId\":\"C3D14F4C-A21E-465D-A928-5CCE684E2B98\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.15.186\",\"matchCriteriaId\":\"D96F2C0D-0D4A-4658-AD34-D8A626EA422D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"6.1.142\",\"matchCriteriaId\":\"459B4E94-FE0E-434D-B782-95E3A5FFC6B1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.6.94\",\"matchCriteriaId\":\"304E3F01-7D7A-4908-994E-7F95C5C00B06\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7\",\"versionEndExcluding\":\"6.12.34\",\"matchCriteriaId\":\"4FFA54AA-CDFE-4591-BD07-72813D0948F4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.13\",\"versionEndExcluding\":\"6.15.3\",\"matchCriteriaId\":\"0541C761-BD5E-4C1A-8432-83B375D7EB92\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FA6FEEC2-9F11-4643-8827-749718254FED\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/12e4431e5078847791936820bd39df9e1ee26d2e\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/1d5baab39e5b09a76870b345cdee7933871b881f\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/3135e03a92f6b5259d0a7f25f728e9e7866ede3f\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/4b23c46eb2d88924b93aca647bde9a4b9cf62cf9\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/7002b954c4a8b9965ba0f139812ee4a6f71beac8\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/873d47114fd5e5a1cad2018843671537cc71ac84\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/b2057374f326303c86d8423415ab58656eebc695\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/d694bf8a9acdbd061596f3e7549bc8cb70750a60\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-06-30T01:03:32+00:00",
      "cve": "CVE-2025-38313",
      "id": "CVE-2025-38313",
      "initial_release_date": "2025-07-10T00:00:00+00:00",
      "product_status:known_affected": "76",
      "product_status:known_not_affected": "198",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: Linux kernel: Double-free vulnerability in fsl-mc bus driver can lead to denial of service, information disclosure, or arbitrary code execution.",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-38313.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-08-29T01:19:16Z",
      "cve": "CVE-2025-38313",
      "id": "CVE-2025-38313",
      "initial_release_date": "2025-07-10T23:22:47Z",
      "product_status:first_fixed": "2",
      "product_status:known_affected": "643",
      "product_status:known_not_affected": "142",
      "product_status:recommended": "495",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2025-38313",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2025-38313.json",
      "version": "49"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.