Exploitation active confirmée

Ajoutée au catalogue CISA KEV le 04/09/2025, correctif exigé avant le 25/09/2025 pour les agences fédérales américaines.

Action requise : Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Description officielle (NVD)

Linux kernel contains a time-of-check time-of-use (TOCTOU) race condition vulnerability that has a high impact on confidentiality, integrity, and availability.

Preuves de concept publiques (6)

Dépôts tiers non vérifiés, parfois piégés. Ne les exécutez jamais en production : uniquement dans un environnement de test isolé.

farazsth98/chronomaly · ★ 312 · 03/01/2026
Android kernel exploit for CVE-2025-38352, previously exploited in-the-wild. Targets vulnerable x86_64 Linux kernels v5.10.x.
farazsth98/poc-CVE-2025-38352 · ★ 119 · 21/12/2025
This is a proof of concept for CVE-2025-38352, a vulnerability in the Linux kernel's POSIX CPU timers implementation. The September 2025 Android Bulletin mentions that this vulnerability has been used
AnalyticETH/chronomaly-webos · ★ 17 · 30/05/2026
CVE-2025-38352 kernel exploit for LG webOS Smart TVs (ARM64). Achieves persistent root on real consumer hardware with novel exploitation techniques. Responsibly disclosed to LG.
jordelmir/Elysium-Vanguard-Sentinel-Audit · ★ 2 · 24/02/2026
The official Sentinel Edition v7.11 - Hypervisor Detection & Kernel Memory Audit Suite for Honor Magic V2. Investigating CVE-2025-38352 and EL2 RKP defenses.
Crime2/poc-CVE-2025-38352 · ★ 0 · 08/01/2026
longwasu/CVE-2025-38352-PoC · ★ 0 · 13/09/2026
PoC and GDB script assists in triggering CVE-2025-38352