CVE-2025-38287

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: A flaw was identified in the Linux kernel’s IB/cm subsystem. The send completion handler could execute after the cm id had progressed to a new message. While the cm id lock wasn’t required in this scenario, a recent modification reused the cm free priv msg() function. This function verifies that the lock is held and issues a warning if the cm id’s outstanding message differs from the one being freed. The vulnerability involves bypassing a lockdep assertion and warning during the freeing of an old message.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.