Slab Use-After-Free Vulnerability in Linux Kernel - CVE-2025-38024
Summary
CVE-2025-38024: In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug Call Trace: dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x7d/0xa0 lib/dump_st... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware management and system resources. It supports a wide range of functionalities, including process management, memory management, and device control. The kernel's stability and security are crucial, as vulnerabilities can lead to severe system compromises. This specific vulnerability affects the RDMA/rxe subsystem, which is responsible for remote direct memory access, enabling high-throughput and low-latency networking.
Vulnerability Detail
CVE-2025-38024 is a slab-use-after-free vulnerability found in the RDMA/rxe component of the Linux kernel. It arises when the function rxe_create_cq fails, leading to improper handling of memory resources that have already been freed. This can result in a potential read of freed memory, which may allow an attacker to exploit the system, leading to data corruption or unauthorized access. The vulnerability is traced back to the improper cleanup of resources in the rxe_queue_cleanup function, which can be exploited if not addressed.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
Currently, no specific workaround is provided for this vulnerability. The best course of action is to apply the available patches as soon as possible.
Conclusion
CVE-2025-38024 represents a significant security risk within the Linux kernel's RDMA/rxe subsystem, necessitating immediate attention from system administrators. By applying the recommended updates, users can protect their systems from potential exploitation. Utilizing tools like Vulert can further enhance security by providing real-time monitoring of vulnerabilities.
See every vulnerability recorded for linux →
FAQ
CVE-2025-38024 is a vulnerability in the Linux kernel's RDMA/rxe subsystem that can lead to a slab-use-after-free condition, potentially allowing unauthorized access or data corruption.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software. By using the Vulert playground, you can check if your application is affected by this vulnerability without requiring any installation.
Exploitation of this vulnerability could lead to unauthorized access to system memory, data corruption, or even a complete system compromise, depending on the attacker's capabilities.
Yes, patches are available for affected versions of the Linux kernel. It is crucial to update to the specified patched versions to mitigate the risk.
While there are no specific workarounds, it is advisable to limit access to the affected systems and monitor for any unusual activity until you can apply the necessary updates.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
