CVE-2025-38151
Description
In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Fix hang when cma_netevent_callback fails to queue_work The cited commit fixed a crash when cma_netevent_callback was called for a cma_id while work on that id from a previous call had not yet started. The work item was re-initialized in the second call, which corrupted the work item currently in the work queue. However, it left a problem when queue_work fails (because the item is still pending in the work queue from a previous call). In this case, cma_id_put (which is called in the work handler) is therefore not called. This results in a userspace process hang (zombie process). Fix this by calling cma_id_put() if queue_work fails.
How to fix
- linux linux_kernel6.1.142, 6.6.94, 6.12.34, 6.15, 6.15.3 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux linux_kernel | 6.1.135 ≤ v < 6.1.142, 6.6.88 ≤ v < 6.6.94, 6.12.25 ≤ v < 6.12.34, 6.14.4 ≤ v < 6.15, 6.15.1 ≤ v < 6.15.3, 6.15 | 6.1.142, 6.6.94, 6.12.34, 6.15, 6.15.3 |
| debian debian_linux | 11.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.