Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability

[POC] CVE-2025-38352 — chronomaly

Android kernel exploit for CVE-2025-38352, previously exploited in-the-wild. Targets vulnerable Linux kernels v5.10.x.

[POC] CVE-2025-38352 — chronomaly-webos

CVE-2025-38352 kernel exploit for LG webOS Smart TVs (ARM64). Achieves persistent root on real consumer hardware with novel exploitation techniques. Responsibly disclosed to LG.

[POC] CVE-2025-38352 — Elysium-Vanguard-Sentinel-Audit

The official Sentinel Edition v7.11 - Hypervisor Detection & Kernel Memory Audit Suite for Honor Magic V2. Investigating CVE-2025-38352 and EL2 RKP defenses.

[POC] CVE-2025-38352 — soikoth3010.github.io

🚀 Exploit the Android/Linux kernel using CVE-2025-38352 with Chronomaly, designed for vulnerable v5.10.x kernels without needing specific offsets.

[POC] CVE-2025-38352 — poc-CVE-2025-38352

This is a proof of concept for CVE-2025-38352, a vulnerability in the Linux kernel's POSIX CPU timers implementation. The September 2025 Android Bulletin mentions that this vulnerability has been used in limited, targeted exploitation in the wild.

[POC] CVE-2025-38352 — chronomaly

🛠️ Exploit the CVE-2025-38352 vulnerability in the Android/Linux kernel with Chronomaly, designed for efficient use on vulnerable v5.10.x kernels.

PoC: CVE-2025-38352-PoC

PoC and GDB script assists in triggering CVE-2025-38352