PT-2025-27984 · Linux+2 · Linux Kernel+2

Published 2025-06-02 · Updated 2026-02-20 · CVE-2025-38209

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: A vulnerability in the Linux kernel has been resolved, related to the nvme-tcp module. The issue occurs when the second admin queue configuration fails, causing a tag set to not be removed. This can lead to a BUG KASAN slab-use-after-free in blk mq queue tag busy iter(). The problem arises from the nvme tcp setup ctrl() function not calling nvme remove admin tag set() when the second nvme tcp configure admin queue() call fails. To fix this, nvme remove admin tag set() is called when the second nvme tcp configure admin queue() call fails, and the function jumps to the "destroy admin" label to call nvme tcp teardown admin queue(), which removes the admin tag set.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2025-08998

CVE-2025-38209

OPENSUSE-SU-2025:20081-1

SUSE-SU-2025:21074-1

SUSE-SU-2025:21139-1

SUSE-SU-2025:21179-1

SUSE-SU-2026:0447-1

SUSE-SU-2026:0472-1

SUSE-SU-2026:0587-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 1629

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38209.json · Exploit
• https://osv.dev/vulnerability/openSUSE-SU-2025:20081-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:21139-1 · Vendor Advisory
• https://git.kernel.org/stable/c/db1da838b6012e4570c6f81e28ffe1d0ff595948 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2026:0587-1 · Vendor Advisory
• https://git.kernel.org/stable/c/e7143706702a209c814ed2c3fc6486c2a7decf6c · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-38209 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-08998 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:0472-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-38209 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38209 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:21074-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-38209 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:0447-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-38209 · Security Note