PT-2025-30773 · Linux+5 · Linux Kernel+5

Published

2025-06-16

·

Updated

2026-05-26

·

CVE-2025-38373

CVSS v2.0

6.0

Medium

VectorAV:L/AC:H/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A potential deadlock can occur in the IB/mlx5 module during Memory Region (MR) deregistration. This issue arises when kzalloc() is invoked while holding the umem mutex or any lock acquired under it. The kzalloc() function can trigger fs reclaim aqcuire(), which may then invoke mmu notifier invalidate range start(). This function can lead to mlx5 ib invalidate range(), which attempts to re-acquire the umem mutex, resulting in a deadlock. The deadlock can also occur when kzalloc() is called from within cache ent find and store().
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Locking

Weakness Enumeration

Related Identifiers

BDU:2025-09244
CVE-2025-38373
OESA-2026-1759
OESA-2026-1760
OESA-2026-1761
OPENSUSE-SU-2025:20081-1
SUSE-SU-2025:02853-1
SUSE-SU-2025:02923-1
SUSE-SU-2025:02969-1
SUSE-SU-2025:02996-1
SUSE-SU-2025:02997-1
SUSE-SU-2025:03011-1
SUSE-SU-2025:03023-1
SUSE-SU-2025:20577-1
SUSE-SU-2025:20586-1
SUSE-SU-2025:20601-1
SUSE-SU-2025:20602-1
SUSE-SU-2025:21074-1
SUSE-SU-2025:21139-1
SUSE-SU-2025:21179-1
SUSE-SU-2025_02853-1
SUSE-SU-2025_02969-1
SUSE-SU-2025_02996-1
SUSE-SU-2025_02997-1
SUSE-SU-2025_03011-1
SUSE-SU-2025_03023-1
USN-7833-1
USN-7833-2
USN-7833-3
USN-7833-4
USN-7834-1
USN-7856-1
USN-8028-1
USN-8028-2
USN-8028-3
USN-8028-4
USN-8028-5
USN-8028-6
USN-8028-7
USN-8028-8
USN-8031-1
USN-8031-2
USN-8031-3
USN-8052-1
USN-8052-2
USN-8074-1
USN-8074-2
USN-8126-1

Affected Products

Astra Linux
Linuxmint
Linux Kernel
Suse
Ubuntu
Mlx5