CVE-2025-38287

CVE-2025-38287 affects the Linux kernel InfiniBand subsystem (IB_cm). The issue occurs when freeing old cm_priv_msg via cm_free_priv_msg() after cm_id has advanced, where a lock held assertion and WARN triggers due to reuse of the cm_id lock. This could allow a local attacker to trigger a denial ...

kernel: bpf: bpf_sk_storage: Fix invalid wait context lockdep report

A locking context violation was found in the BPF socket local storage implementation in the Linux kernel. The code attempts to allocate memory via kzalloc while holding a rawspinlock, which is unsafe for PREEMPTRT kernels. This can cause lockdep warnings and potential issues on real-time kernels...

PT-2022-35066 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue concerns the use of per-device lockdep class for mlock. It was introduced in version v4.10 and is fixed in Linux Kernel version v6.0.3. The actual impact and attack plausibility hav...