HIGH CISA KEV

CVE-2025-38352

CVSS v3

7.4

HIGH

EPSS Score

1.3 %

exploit probability, as of 2026-10-03

CISA KEV

Yes

known exploited

Exploitation

—

SSVC status

Description

In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() If an exiting non-autoreaping task has already passed exit_notify() and calls handle_posix_cpu_timers() from IRQ, it can be reaped by its parent or debugger right after unlock_task_sighand(). If a concurrent posix_cpu_timer_del() runs at that moment, it won't be able to detect timer->it.cpu.firing != 0: cpu_timer_task_rcu() and/or lock_task

CISA Known Exploited Vulnerability

Date Added: 2025-09-04
Patch Due Date: 2025-09-25
Ransomware Use: Unknown

Technical details

Published: 2025-07-22
Last Modified: 2026-01-08

Frequently asked questions

What is CVE-2025-38352?

Is CVE-2025-38352 actively exploited?

Yes. CVE-2025-38352 is on the CISA Known Exploited Vulnerabilities (KEV) catalog, meaning it has been confirmed as actively exploited in the wild. CISA requires federal agencies to patch by 2025-09-25.

What is the CVSS score for CVE-2025-38352?

CVE-2025-38352 has a CVSS v3 base score of 7.4 (HIGH severity).

Is CVE-2025-38352 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.

Check an IP Search CVEs SIEM & TIP integrations

No credit card required · 50 free checks/month · Free API key

Go further

For a threat intelligence platform: malware, C2 and ransomware indicators over STIX/TAXII.

Other 2025 vulnerabilities worth triaging

Ranked by exploit probability (EPSS).

Back to CVE Database