Linux Kernel RDMA Vulnerability in Mellanox Device Drivers

CVE-2025-38372

What is CVE-2025-38372?

In the Linux kernel, an improper handling of implicit ODP in RDMA related to Mellanox device drivers led to unsafe access of shared resources. The functions __xa_store() and __xa_erase() were executed without the appropriate locks, resulting in potential RCU usage warnings and unstable kernel behavior. This issue underscores the importance of implementing proper locking mechanisms to ensure data integrity and system stability in multi-threaded environments.

References