PT-2025-29008 · Linux+5 · Linux Kernel+5

Anubis · Published 2025-04-23 · Updated 2026-03-06 · CVE-2025-38288

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions:

Linux Kernel (affected versions not specified)

Description:

The Linux kernel contains an issue within the smartpqi module related to the smp processor id() function. Calling smp processor id() in preemptible kernels can lead to an error message and a call to dump stack(). The fix involves using raw smp processor id() when called in preemptible kernels to correct the kernel call trace. The call trace includes functions like check preemption disabled() and pqi scsi queue command().

Recommendations:

At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Initialization

Weakness Enumeration

CWE-665

Related Identifiers

BDU:2025-08628

CVE-2025-38288

OPENSUSE-SU-2025:20081-1

RHSA-2025:20095

RHSA-2025:20518

SUSE-SU-2025:02853-1

SUSE-SU-2025:02997-1

SUSE-SU-2025:03011-1

SUSE-SU-2025:21074-1

SUSE-SU-2025:21139-1

SUSE-SU-2025:21179-1

SUSE-SU-2025_02853-1

SUSE-SU-2025_02997-1

SUSE-SU-2025_03011-1

USN-7769-1

USN-7769-2

USN-7769-3

USN-7770-1

USN-7771-1

USN-7789-1

USN-7789-2

Affected Products

Astra Linux

Linux Kernel

Linuxmint

Red Os

Suse

Ubuntu

References · 1639

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38288.json · Exploit
• https://ubuntu.com/security/CVE-2025-38062 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38047 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38291 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7770-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38099 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38140 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:20081-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38299 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38287 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2025-38288 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7769-3 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38071 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38135 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38064 · Vendor Advisory