01 Record

CVE-2025-38424

perf: Fix sample vs do_exit()

HighPUBLISHEDCNA: Linux

CNA base score7.8 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

perf: Fix sample vs do_exit()

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.18% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 8.1% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-07-30.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-07-25 14:16Z1 YR AGO

Last updated

2026-08-05 12:01Z1 MO AGO

Reserved

2025-04-16

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.8)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-825Expired Pointer DereferenceBase

Data version

5.2

Document digest

ada7e48b49743bbc351ac4286fc23241c1201d087b8e2f586e9a75b36b68a487

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxc5ebcedb566ef17bda7b02686e0d658a7bb42ee7 to < 7b8f3c72175c6a63a95cf2e219f8b78e2baad34e, c5ebcedb566ef17bda7b02686e0d658a7bb42ee7 to < 507c9a595bad3abd107c6a8857d7fd125d89f386, c5ebcedb566ef17bda7b02686e0d658a7bb42ee7 to < a9f6aab7910a0ef2895797f15c947f6d1053160f, c5ebcedb566ef17bda7b02686e0d658a7bb42ee7 to < 975ffddfa2e19823c719459d2364fcaa17673964, c5ebcedb566ef17bda7b02686e0d658a7bb42ee7 to < 2ee6044a693735396bb47eeaba1ac3ae26c1c99b, c5ebcedb566ef17bda7b02686e0d658a7bb42ee7 to < 456019adaa2f5366b89c868dea9b483179bece54, c5ebcedb566ef17bda7b02686e0d658a7bb42ee7 to < 7311970d07c4606362081250da95f2c7901fc0db, c5ebcedb566ef17bda7b02686e0d658a7bb42ee7 to < 4f6fc782128355931527cefe3eb45338abd8ab39, 3.7—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/7b8f3c72175c6a63a95cf2e219f8b78e2baad34e
git.kernel.orghttps://git.kernel.org/stable/c/507c9a595bad3abd107c6a8857d7fd125d89f386
git.kernel.orghttps://git.kernel.org/stable/c/a9f6aab7910a0ef2895797f15c947f6d1053160f
git.kernel.orghttps://git.kernel.org/stable/c/975ffddfa2e19823c719459d2364fcaa17673964
git.kernel.orghttps://git.kernel.org/stable/c/2ee6044a693735396bb47eeaba1ac3ae26c1c99b
git.kernel.orghttps://git.kernel.org/stable/c/456019adaa2f5366b89c868dea9b483179bece54
git.kernel.orghttps://git.kernel.org/stable/c/7311970d07c4606362081250da95f2c7901fc0db
git.kernel.orghttps://git.kernel.org/stable/c/4f6fc782128355931527cefe3eb45338abd8ab39
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/10/msg00008.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/10/msg00007.html

01 Record index

CVE-2025-38424

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2025-38424

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References