PT-2025-30797 · Linux+2 · Linux Kernel+2

Published 2025-06-30 · Updated 2025-11-25 · CVE-2025-38397

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.16.0-rc3+ #23

Description The Linux kernel contains a flaw in the NVME over TCP implementation related to suspicious RCU (Read-Copy-Update) usage within the nvme mpath add sysfs link() function. This issue manifests as an "RCU-list traversed in non-reader section" warning during testing, specifically when running the NVME over TCP test in virtme-ng. The warning indicates a potential race condition or incorrect synchronization when managing RCU lists, which could lead to system instability or other undefined behavior.

Recommendations Update to Linux kernel version 6.16.0-rc3+ #23 or a later version to address this issue.

Exploit

Fix

Weakness Enumeration

CWE-411

Related Identifiers

BDU:2025-13496

CVE-2025-38397

OPENSUSE-SU-2025:20081-1

SUSE-SU-2025:21074-1

SUSE-SU-2025:21139-1

SUSE-SU-2025:21179-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 1261

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38397.json · Exploit
• https://osv.dev/vulnerability/openSUSE-SU-2025:20081-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-38397 · Vendor Advisory
• https://git.kernel.org/stable/c/a432383e6cd86d9fda00a6073ed35c1067a836d6 · Patch
• https://git.kernel.org/stable/c/d6811074203b13f715ce2480ac64c5b1c773f2a5 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:21139-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-38397 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-38397 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:21074-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-38397 · Security Note
• https://bdu.fstec.ru/vul/2025-13496 · Security Note
• https://ubuntu.com/security/CVE-2025-38397 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:21179-1 · Vendor Advisory
• https://suse.com/security/cve/CVE-2025-39845 · Note
• https://suse.com/security/cve/CVE-2025-38120 · Note