01 Record

CVE-2025-38687

comedi: fix race between polling and detaching

HighPUBLISHEDCNA: Linux

CNA base score7.3 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

View raw JSON

02 Description

comedi: fix race between polling and detaching

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.12% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 2.5% of scored records. A rank, not a probability.
NVD base score: 4.7 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-07-30.
Red Hat severity: No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-09-04 15:32Z1 YR AGO

Last updated

2026-08-05 12:03Z1 MO AGO

Reserved

2025-04-16

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.3)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Weaknesses

CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')Class

Data version

5.2

Document digest

73d6655bba95d25a3e8ebece78603f3e2b4516301e133a346c862bc790fb53c5

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux2f3fdcd7ce935f6f2899ceab57dc8fe5286db3e1 to < fe67122ba781df44a1a9716eb1dfd751321ab512, 2f3fdcd7ce935f6f2899ceab57dc8fe5286db3e1 to < cd4286123d6948ff638ea9cd5818ae4796d5d252, 2f3fdcd7ce935f6f2899ceab57dc8fe5286db3e1 to < d85fac8729c9acfd72368faff1d576ec585e5c8f, 2f3fdcd7ce935f6f2899ceab57dc8fe5286db3e1 to < 0f989f9d05492028afd2bded4b42023c57d8a76e, 2f3fdcd7ce935f6f2899ceab57dc8fe5286db3e1 to < 5c4a2ffcbd052c69bbf4680677d4c4eaa5a252d4, 2f3fdcd7ce935f6f2899ceab57dc8fe5286db3e1 to < 017198079551a2a5cf61eae966af3c4b145e1f3b, 2f3fdcd7ce935f6f2899ceab57dc8fe5286db3e1 to < 71ca60d2e631cf9c63bcbc7017961c61ff04e419, 2f3fdcd7ce935f6f2899ceab57dc8fe5286db3e1 to < 5724e82df4f9a4be62908362c97d522d25de75dd, 2f3fdcd7ce935f6f2899ceab57dc8fe5286db3e1 to < 35b6fc51c666fc96355be5cd633ed0fe4ccf68b2, 3.14—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/fe67122ba781df44a1a9716eb1dfd751321ab512
git.kernel.orghttps://git.kernel.org/stable/c/cd4286123d6948ff638ea9cd5818ae4796d5d252
git.kernel.orghttps://git.kernel.org/stable/c/d85fac8729c9acfd72368faff1d576ec585e5c8f
git.kernel.orghttps://git.kernel.org/stable/c/0f989f9d05492028afd2bded4b42023c57d8a76e
git.kernel.orghttps://git.kernel.org/stable/c/5c4a2ffcbd052c69bbf4680677d4c4eaa5a252d4
git.kernel.orghttps://git.kernel.org/stable/c/017198079551a2a5cf61eae966af3c4b145e1f3b
git.kernel.orghttps://git.kernel.org/stable/c/71ca60d2e631cf9c63bcbc7017961c61ff04e419
git.kernel.orghttps://git.kernel.org/stable/c/5724e82df4f9a4be62908362c97d522d25de75dd
git.kernel.orghttps://git.kernel.org/stable/c/35b6fc51c666fc96355be5cd633ed0fe4ccf68b2
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/10/msg00008.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/10/msg00007.html
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-032379.html

01 Record index

CVE-2025-38687

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2025-38687

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References