PT-2025-27737 · Linux+5 · Linux Kernel+5
CVE-2025-38151
·
Published
2025-05-21
·
Updated
2026-08-25
CVSS v4.0
5.7
Medium
| Vector | AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
A issue in the Linux kernel has been identified where a hang occurs when
cma netevent callback fails to queue work. This happens because if queue work fails, cma id put is not called, resulting in a userspace process hang. The problem arises when a work item is re-initialized in a second call to cma netevent callback before the work from the previous call has started, corrupting the work item in the work queue.Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Improper Initialization
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Debian
Linuxmint
Linux Kernel
Suse
Ubuntu