CVE-2025-38236 - Vulnerability Details

Related Threat Clusters

• Critical Bad Epoll Vulnerability Grants Root Access to Unprivileged Users

  A newly disclosed Linux kernel vulnerability, named Bad Epoll (CVE-2026-46242), allows unprivileged local users to escalate to root privileges on systems running kernel version 6.4 or later. This use-after-free…

  16 articles · Updated July 4, 2026
• Multiple CVEs Affecting af_unix Published on February 18, 2026

  Two vulnerabilities in the af_unix subsystem have been reported, identified as CVE-2025-38236 and CVE-2024-36972. CVE-2025-38236 was published on July 8, 2025, while CVE-2024-36972 was published on June 10, 2024. Both…

  2 articles · Updated February 18, 2026
• Multiple Linux Kernel Vulnerabilities Discovered and Patched

  Several vulnerabilities were identified in the Linux kernel affecting various architectures and subsystems. These vulnerabilities could allow attackers to compromise systems running affected versions of the kernel.…

  360 articles · Updated February 12, 2026

Recent Intelligence Reports

• Google Project Zero demonstrated with the MSG_OOB exploit chain — projectzero.google · July 5, 2026
• CVE-2025-38236 af_unix: Don't leave consecutive consumed OOB skbs. — Api.Msrc.Microsoft · February 18, 2026
• Ubuntu 20.04 LTS linux-aws Critical Kernel Flaw USN-8033-4 CVE-2024 — Linuxsecurity · February 13, 2026
• Ubuntu 22.04 LTS USN-8034 — Linuxsecurity · February 12, 2026

Related Entities