CVE-2025-38095High· 7.8▾ TwilightIn the Linux kernel, the following vulnerability has been resolved: dma-buf: insert memory barrier before updating num_fences smp_store_mb() inserts memory barrier after storing operation. It is different with what the comment is origi…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 42.9 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Oct 15.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.2%
7.8 → 5.5
high → medium
5.5 → 7.8
medium → high
In the Linux kernel, the following vulnerability has been resolved:
dma-buf: insert memory barrier before updating num_fences
smp_store_mb() inserts memory barrier after storing operation. It is different with what the comment is originally aiming so Null pointer dereference can be happened if memory update is reordered.
linux_kernel >= 5.0, < 5.10.241linux_kernel >= 5.11, < 5.15.192linux_kernel >= 5.16, < 6.1.140linux_kernel >= 6.2, < 6.6.92linux_kernel >= 6.7, < 6.12.30linux_kernel >= 6.13, < 6.14.8linux_kernel = 6.15debian_linux = 11.0Upgrade past the affected range:
linux_kernel 6.14.8Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2020-36558Medium· 5.1A race condition in the Linux kernel before 5.5.7 involving VT_RESIZEX could lead to a NULL pointer dereference and general protection fault.
CVE-2020-11609Medium· 4.3An issue was discovered in the stv06xx subsystem in the Linux kernel before 5.6.1
CVE-2019-16089Medium· 4.1An issue was discovered in the Linux kernel through 5.2.13
CVE-2020-36311Medium· 5.5An issue was discovered in the Linux kernel before 5.9
CVE-2022-0500High· 7.8A flaw was found in unrestricted eBPF usage by the BPF_BTF_LOAD, leading to a possible out-of-bounds memory write in the Linux kernel’s BPF subsystem due to the way a user loads BTF
CVE-2021-38198Medium· 5.5arch/x86/kvm/mmu/paging_tmpl.h in the Linux kernel before 5.12.11 incorrectly computes the access permissions of a shadow page, leading to a missing guest protection page fault.