PT-2025-27986 · Linux+9 · Linux Kernel+9
Anubis
·
Published
2025-05-10
·
Updated
2026-05-26
·
CVE-2025-38211
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions prior to the fixed version
Description:
A use-after-free condition in the Linux kernel's RDMA/iwcm module can occur when the last reference to a cm id is decremented in an event handler work, causing the work object for the work itself to get removed. This can lead to a slab-use-after-free bug. The issue is reproducible by repeating a specific test case for the rdma transport and the siw driver.
Recommendations:
To resolve the issue, ensure that the last reference to the cm id is decremented not in the event handler works, but in the cm id destruction context.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
DoS
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Almalinux
Centos
Debian
Linuxmint
Linux Kernel
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu