CVE-2025-38151

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

RDMA/cma: Fix hang when cma_netevent_callback fails to queue_work

The cited commit fixed a crash when cma_netevent_callback was called for a cma_id while work on that id from a previous call had not yet started. The work item was re-initialized in the second call, which corrupted the work item currently in the work queue.

However, it left a problem when queue_work fails (because the item is still pending in the work queue from a previous call). In this case, cma_id_put (which is called in the work handler) is therefore not called. This results in a userspace process hang (zombie process).

Fix this by calling cma_id_put() if queue_work fails.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
LinuxLinux>= 51003b2c872c63d28bcf5fbcc52cf7b05615f7b7, < 1ac40736c8c4255d8417b937c9715b193f4a87b3; >= c2b169fc7a12665d8a675c1ff14bca1b9c63fb9a, < ac7897c0124066b9705ffca252a3662d54fc0c9b; >= d23fd7a539ac078df119707110686a5b226ee3bb, < 02e45168e0fd6fdc6f8f7c42c4b500857aa5efb0; >= 45f5dcdd049719fb999393b30679605f16ebce14, < 8b05aa3692e45b8249379dc52b14acc6a104d2e5; >= 45f5dcdd049719fb999393b30679605f16ebce14, < 92a251c3df8ea1991cd9fe00f1ab0cfce18d7711; b172a4a0de254f1fcce7591833a9a63547c2f447; >= 6.1.135, < 6.1.142; >= 6.6.88, < 6.6.94; >= 6.12.25, < 6.12.34; >= 6.14.4, < 6.15
LinuxLinux6.15

References

Timeline

Published
Jul 3, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-381525.5In the Linux kernel, the following vulnerability has been resolved: remoteproc: core: Clear table_sz when rproc_shutdown There is case as CVE-2025-381537.1In the Linux kernel, the following vulnerability has been resolved: net: usb: aqc111: fix error handling of usbnet read calls Syzkaller, cCVE-2025-381547.8In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Avoid using sk_socket after free when sending The sk->skCVE-2025-381555.5In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: Fix null-ptr-deref in mt7915_mmio_wed_init() devm_CVE-2025-381565.5In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Fix null-ptr-deref in mt7996_mmio_wed_init() devm_CVE-2025-381577.8In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k_htc: Abort software beacon handling if disabled A maliciouCVE-2025-381585.5In the Linux kernel, the following vulnerability has been resolved: hisi_acc_vfio_pci: fix XQE dma address error The dma addresses of EQE CVE-2025-381597.1In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds CVE-2025-38167.2A vulnerability classified as critical was found in westboy CicadasCMS 2.0. This vulnerability affects unknown code of the file /system/scheCVE-2025-381605.5In the Linux kernel, the following vulnerability has been resolved: clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() devm_kasprCVE-2025-381615.5In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction UpoCVE-2025-381625.5In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo: prevent overflow in lookup table allocation
CVE-2025-38151: Medium severity, CVSS 5.5 | Vulnix