CVE-2025-38211

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to the fixed version

Description: A use-after-free condition in the Linux kernel's RDMA/iwcm module can occur when the last reference to a cm id is decremented in an event handler work, causing the work object for the work itself to get removed. This can lead to a slab-use-after-free bug. The issue is reproducible by repeating a specific test case for the rdma transport and the siw driver.

Recommendations: To resolve the issue, ensure that the last reference to the cm id is decremented not in the event handler works, but in the cm id destruction context. At the moment, there is no information about a newer version that contains a fix for this vulnerability.