CVE-2025-38151
Analyzed Analyzed - Analysis Complete
BaseFortify

Publication date: 2025-07-03

Last updated on: 2025-12-18

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Fix hang when cma_netevent_callback fails to queue_work The cited commit fixed a crash when cma_netevent_callback was called for a cma_id while work on that id from a previous call had not yet started. The work item was re-initialized in the second call, which corrupted the work item currently in the work queue. However, it left a problem when queue_work fails (because the item is still pending in the work queue from a previous call). In this case, cma_id_put (which is called in the work handler) is therefore not called. This results in a userspace process hang (zombie process). Fix this by calling cma_id_put() if queue_work fails.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-07-03
Last Modified
2025-12-18
Generated
2026-05-07
AI Q&A
2025-07-03
EPSS Evaluated
2026-05-05
NVD
Affected Vendors & Products
Showing 12 associated CPEs
Vendor Product Version / Range
linux linux_kernel From 6.1.135 (inc) to 6.1.142 (exc)
linux linux_kernel From 6.6.88 (inc) to 6.6.94 (exc)
linux linux_kernel From 6.12.25 (inc) to 6.12.34 (exc)
linux linux_kernel From 6.14.4 (inc) to 6.15 (exc)
linux linux_kernel From 6.15.1 (inc) to 6.15.3 (exc)
linux linux_kernel 6.15
linux linux_kernel 6.15
linux linux_kernel 6.15
linux linux_kernel 6.15
linux linux_kernel 6.15
linux linux_kernel 6.15
debian debian_linux 11.0
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-NVD-CWE-noinfo
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?

This vulnerability occurs in the Linux kernel's RDMA/cma component. When the cma_netevent_callback function is called for a cma_id while previous work on that id has not yet started, the work item is re-initialized, corrupting the work item in the queue. Additionally, if queue_work fails because the work item is still pending, the cma_id_put function is not called, which causes a userspace process to hang (become a zombie). The fix involves calling cma_id_put if queue_work fails to prevent this hang.


How can this vulnerability impact me? :

This vulnerability can cause a userspace process to hang indefinitely, resulting in zombie processes. This can lead to resource exhaustion or degraded system performance due to hung processes that are not properly cleaned up.


Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70
EPSS Chart