Kernel Workqueue Crash Vulnerability in Linux Package
Summary
CVE-2025-37772: In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Fix workqueue crash in cma_netevent_work_handler struct rdma_cm_id has member "struct work_struct net_work" that is reused for enqueuing cma_n... Affects linux versions < 6.1.135-1. Fixed in 6.1.135-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. It provides essential functionalities such as process management, memory management, and device control. This vulnerability affects the RDMA (Remote Direct Memory Access) subsystem, specifically the cma_netevent_work_handler, which is responsible for handling network events in RDMA communication. The vulnerability arises from improper handling of work items in the workqueue, leading to potential crashes.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the RDMA/cma subsystem, where multiple rapid calls to cma_netevent_callback() can lead to a workqueue crash. The struct rdma_cm_id contains a member 'struct work_struct net_work' that is reused for enqueuing work handlers. If two calls to cma_netevent_callback() occur in quick succession, the second call can overwrite the first queued work item, resulting in a NULL pointer dereference and subsequent kernel crash. This issue poses a risk of system instability and can lead to denial of service.
How To Fix
Minimum fixed version
6.1.135-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the available patch as soon as possible.
Conclusion
The vulnerability CVE-2025-37772 in the Linux kernel's RDMA/cma subsystem poses a significant risk of system crashes due to improper handling of work items in the workqueue. Users are strongly advised to update their Linux packages to the patched version to mitigate this risk. Utilizing tools like Vulert can help monitor for such vulnerabilities effectively.
See every vulnerability recorded for linux →
FAQ
The vulnerability involves a race condition in the RDMA/cma subsystem that can lead to a kernel crash due to a NULL pointer dereference.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software. By using the Vulert playground, you can check if your application is affected by this vulnerability without any signup.
The vulnerability can lead to system crashes and instability, potentially resulting in denial of service for applications relying on RDMA communication.
Yes, a patch is available in version 6.1.135-1 of the Linux package. It is recommended to update to this version or later.
While there are no specific workarounds, it is crucial to monitor your system for any unusual behavior and plan to apply the patch as soon as possible.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
