CVE-2025-38287

{"id": "CVE-2025-38287", "cveTags": [], "metrics": {}, "published": "2025-07-10T08:15:27.230", "references": [{"url": "https://git.kernel.org/stable/c/7590649ee7af381a9d1153143026dec124c5798e", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/fc096a0cd2017cb0aa1e7fb83131410af9283910", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Awaiting Analysis", "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nIB/cm: Drop lockdep assert and WARN when freeing old msg\n\nThe send completion handler can run after cm_id has advanced to another\nmessage. The cm_id lock is not needed in this case, but a recent change\nre-used cm_free_priv_msg(), which asserts that the lock is held and\nWARNs if the cm_id's currently outstanding msg is different than the one\nbeing freed."}, {"lang": "es", "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: IB/cm: Se omite la aserci\u00f3n de lockdep y la advertencia al liberar un mensaje antiguo. El controlador de finalizaci\u00f3n de env\u00edo puede ejecutarse despu\u00e9s de que cm_id haya avanzado a otro mensaje. El bloqueo de cm_id no es necesario en este caso, pero un cambio reciente reutiliz\u00f3 cm_free_priv_msg(), que confirma que el bloqueo se mantiene y emite una advertencia si el mensaje pendiente de cm_id es diferente del que se est\u00e1 liberando."}], "lastModified": "2025-07-10T13:17:30.017", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}