PoC Exploit Released for Android/Linux Kernel Vulnerability CVE-2025-38352

The report details CVE-2025-38352, a critical use-after-free race condition in Linux's POSIX CPU timers that primarily impacts 32-bit Android and other 32-bit Linux systems, and the public release of 'Chronomaly', a portable proof-of-concept exploit that enables privilege escalation or kernel code execution; CISA has added the issue to its Known Exploited Vulnerabilities catalog and users are urged to apply the upstream patch or enable CONFIG_POSIX_CPU_TIMERS_TASK_WORK.