PT-2025-30772 · Linux+4 · Linux Kernel+4
CVE-2025-38372
·
Published
2025-06-16
·
Updated
2026-08-19
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.14.0-rc7 for upstream debug 2025 03 18 15 01
Description
A flaw exists in the Linux kernel's RDMA/mlx5 component related to unsafe xarray access during implicit ODP handling. Specifically, the
xa store() and xa erase() functions were used without the necessary locking mechanisms, leading to a lockdep warning and potential RCU usage issues. This could potentially lead to system instability.Recommendations
Update to Linux kernel version 6.14.0-rc7 for upstream debug 2025 03 18 15 01 or a later version to address this issue.
Exploit
Fix
Improper Locking
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linuxmint
Linux Kernel
Suse
Ubuntu