CVE-2025-38048

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A data-race issue has been identified in the Linux kernel, specifically in the virtio ring component. The issue occurs when accessing the event triggered variable, which can lead to a race condition between the virtqueue enable cb delayed() and virtqueue disable cb split/packed() functions. This can cause the driver to temporarily suggest that the device not send an interrupt notification when the event index is used. The estimated number of potentially affected devices worldwide is not available.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.