CVE-2025-38515
BaseFortify
Publication date: 2025-08-16
Last updated on: 2025-11-03
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | 6.1.153-1 |
| linux | linux_kernel | 5.10.244-1 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a race condition in the Linux kernel's DRM scheduler related to the single-producer single-consumer (SPSC) queue. Specifically, there is a timing issue between the function that pushes jobs onto the queue and the worker that runs these jobs. The race can cause the job scheduling to stop because the worker may idle when it incorrectly believes there are no jobs left, leading to system hangs while waiting on job completion.
How can this vulnerability impact me? :
If this race condition occurs, it can cause job scheduling to stop unexpectedly, resulting in system hangs or freezes while waiting for job completion. This can affect system stability and performance, particularly in environments using the affected Linux kernel with the DRM scheduler.