Linux kernel (posix-cpu-timers): TOCTOU race between handle_posix_cpu_timers() and posix_cpu_timer_del()

CVE-2025-38352Kernel, userspace & hypervisorKnown exploitedcurated

Impact

TOCTOU race between handle_posix_cpu_timers() and posix_cpu_timer_del() - local privilege escalation, exploited in the wild [KEV]

Who can reach it

Any tenant process in a container

What to do

Livepatchable; otherwise drain + reboot. No capabilities or namespaces needed, so container hardening does not mitigate it

References

https://access.redhat.com/security/cve/CVE-2025-38352

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.