Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: IB/cm: Drop lockdep assert and WARN when freeing old msg The send completion handler can run after cm_id has advanced to another message. The cm_id lock is not needed in this case, but a recent change re-used cm_free_priv_msg(), which asserts that the lock is held and WARNs if the cm_id's currently outstanding msg is different than the one being freed.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | >= 6.13, < 6.15.3 |
References
- https://git.kernel.org/stable/c/7590649ee7af381a9d1153143026dec124c5798ePatch
- https://git.kernel.org/stable/c/fc096a0cd2017cb0aa1e7fb83131410af9283910Patch
FAQ
What is CVE-2025-38287?
CVE-2025-38287 is a vulnerability with a CVSS score of 5.5 (MEDIUM). In the Linux kernel, the following vulnerability has been resolved: IB/cm: Drop lockdep assert and WARN when freeing old msg The send completion handler can run after cm_id has advanced to another m...
How severe is CVE-2025-38287?
CVE-2025-38287 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-38287?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel.