---
id: 8554
title: "[CVE-2025-38236] From Chrome renderer code exec to kernel with MSG_OOB"
cve: CVE-2025-38236
source_domain: projectzero.google
source_url: "https://projectzero.google/2025/08/from-chrome-renderer-code-exec-to-kernel.html"
published_at: "2025-08-08T00:00:00Z"
tags: ["linux", "privilege-escalation", "exploit", "kernel", "chrome", "cve-2025-38236", "msg-oob"]
phying_url: "https://phying.com/item/8554"
lang: en
---

# [CVE-2025-38236] From Chrome renderer code exec to kernel with MSG_OOB

## Summary

Write-up of CVE-2025-38236, a Linux kernel bug reachable from a compromised Chrome renderer via MSG_OOB socket handling, escalating renderer code execution into kernel privileges.

## Intelligence Metadata

- **Sources:** projectzero.google
- **CVE:** CVE-2025-38236
- **Published:** 2025-08-08T00:00:00Z
- **Original:** https://projectzero.google/2025/08/from-chrome-renderer-code-exec-to-kernel.html
- **Phying News:** https://phying.com/item/8554