CVE-2025-38352: Linux Kernel
EPSS1.2%No. 1650 of 1739 in KEV
CVE year2025listed the same year
Same vendor in KEV31
Same product31
| Field | Value |
|---|---|
| Vendor | Linux |
| Product | Kernel |
| Name | Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability |
| Added to KEV | 2025-09-04 |
| US federal due date | 2025-09-25 |
| Ransomware use | Unknown |
| CWE | CWE-367 |
CISA description
Linux kernel contains a time-of-check time-of-use (TOCTOU) race condition vulnerability that has a high impact on confidentiality, integrity, and availability.
Other entries for this product
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2026-53266 | Linux Kernel | 2026-09-18 | 0.8% | Unknown |
| CVE-2025-39964 | Linux Kernel | 2026-09-18 | 1.2% | Unknown |
| CVE-2025-39682 | Linux Kernel | 2026-09-18 | 2.8% | Unknown |
| CVE-2026-53362 | Linux Kernel | 2026-08-27 | 0.7% | Unknown |
| CVE-2022-0995 | Linux Kernel | 2026-08-26 | 8.7% | Unknown |
| CVE-2022-0492 | Linux Kernel | 2026-06-02 | 5.5% | Unknown |
| CVE-2026-31431 | Linux Kernel | 2026-05-01 | 3.4% | Unknown |
| CVE-2018-14634 | Linux Kernel | 2026-01-26 | 14.6% | Unknown |
| CVE-2021-22555 | Linux Kernel | 2025-10-06 | 78.6% | Unknown |
| CVE-2023-0386 | Linux Kernel | 2025-06-17 | 7.8% | Unknown |
| CVE-2024-53197 | Linux Kernel | 2025-04-09 | 4.1% | Unknown |
| CVE-2024-53150 | Linux Kernel | 2025-04-09 | 1.3% | Unknown |
| CVE-2024-50302 | Linux Kernel | 2025-03-04 | 0.8% | Unknown |
| CVE-2024-53104 | Linux Kernel | 2025-02-05 | 3.3% | Unknown |
| CVE-2017-1000253 | Linux Kernel | 2024-09-09 | 10.6% | Known |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
A Linux Kernel vulnerability added to CISA's Known Exploited Vulnerabilities catalog on 2025-09-04.