PoC Exploit Released for Android/Linux Kernel Vulnerability CVE-2025

Cybersecuritynews •Abinaya • January 7, 2026

A proof-of-concept (PoC) exploit for CVE-2025-38352, a critical race condition vulnerability in the Linux kernel, has been publicly released on GitHub. The vulnerability, discovered earlier this year, targets the POSIX CPU timers implementation and was previously exploited in limited, targeted attacks against 32-bit Android devices. CVE-2025-38352 is a use-after-free (UAF) vulnerability in the Linux kernel’s handle_posix_cpu_timers() function. […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

PoC Exploit for Critical Linux Kernel Vulnerability CVE-2025 Released A proof-of-concept exploit for the critical Linux kernel vulnerability CVE-2025-38352 has been released on GitHub. This vulnerability affects 32-bit Android devices and allows for complete privilege escalation to root access due to a use-after-free condition in the handle_posix_cpu_timers() function. The exploit has previously been used in targeted attacks. 2 sources 43

Extracted Entities

PoC Exploit Released for Android/Linux Kernel Vulnerability CVE-2025

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

Platforms (2)

Vulnerabilities (1)