CVE-2025-38176 is a use-after-free vulnerability in the Linux kernel's binder filesystem, specifically in the binderfs_evict_inode() function. The flaw was discovered during stress testing with KASAN enabled, revealing a race condition causing memory corruption when concurrently deleting binder devices. This vulnerability can lead to high impact including confidentiality, integrity, and availability compromise. It affects Linux kernel versions prior to the fix but no specific versions are stated. The issue has been resolved upstream.