CVE-2025-38287: IB/cm: Drop lockdep assert and WARN when freeing old msg
In the Linux kernel, the following vulnerability has been resolved:
IB/cm: Drop lockdep assert and WARN when freeing old msg
The send completion handler can run after cmid has advanced to another message. The cmid lock is not needed in this case, but a recent change re-used cmfreeprivmsg(), which asserts that the lock is held and WARNs if the cmid's currently outstanding msg is different than the one being freed.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38287?
CVE-2025-38287 is considered to have a medium severity level due to its potential impact on system processes.
How do I fix CVE-2025-38287?
To fix CVE-2025-38287, you should update to the latest patched version of the Linux kernel.
What systems are affected by CVE-2025-38287?
CVE-2025-38287 affects various versions of the Linux kernel.
What are the potential consequences of CVE-2025-38287?
The potential consequences of CVE-2025-38287 include system instability and unexpected behaviors during message handling.
Is there a workaround for CVE-2025-38287 until a fix is applied?
Currently, there are no well-documented workarounds for CVE-2025-38287, and updating the kernel is recommended.