Critical Use-After-Free Vulnerability in Linux Kernel - CVE-2025-38022
Summary
CVE-2025-38022: In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem Call Trace: dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x116/... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware management and system processes. It is widely used in various environments, from servers to embedded systems. The kernel's stability and security are paramount, as vulnerabilities can lead to severe system compromises. CVE-2025-38022 highlights a critical issue within the RDMA/core subsystem, which is responsible for remote direct memory access, allowing for efficient data transfer between computers.
Vulnerability Detail
CVE-2025-38022 is a use-after-free vulnerability found in the Linux kernel's RDMA/core subsystem. This vulnerability arises from improper locking mechanisms when renaming devices, leading to potential exploitation by attackers. The root cause is that the function ib_device_rename() modifies device names while another function, kobject_uevent(), accesses these names without proper lock protection. This flaw can result in unauthorized access to sensitive data or system crashes, posing a significant risk to system integrity.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the patch as soon as it becomes available.
Conclusion
CVE-2025-38022 represents a significant security risk within the Linux kernel's RDMA/core subsystem. Users are urged to update their systems promptly to the patched version to mitigate potential threats. Regular monitoring and updates are essential for maintaining system security.
See every vulnerability recorded for linux →
FAQ
CVE-2025-38022 is a use-after-free vulnerability in the Linux kernel's RDMA/core subsystem that can lead to unauthorized access and system instability.
You can use Vulert, which monitors open-source vulnerabilities in your software. By uploading a manifest file like package-lock.json, you can check for vulnerabilities without needing to install any software.
Exploitation of this vulnerability can lead to unauthorized access to sensitive data, system crashes, or other malicious activities that compromise system integrity.
Yes, a patch is available for Debian 13 in version 6.12.30-1. Users should update their kernel to this version to mitigate the risk.
It is recommended to check for updates regularly, at least once a week, to ensure your system is protected against known vulnerabilities.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
