Search: CVE-2025-38472

A race condition vulnerability in the Linux kernel's netfilter nf_conntrack subsystem could cause a crash due to removal of an uninitialized connection tracking entry. The issue arises from a timing window where a partially initialized conntrack entry is accessed concurrently, leading to use of invalid pointers and a kernel crash. This flaw has been fixed by adjusting the order of setting the confirmed bit and inserting the entry into the hash table, along with memory barriers to prevent reordering.