Linux Kernel Vulnerability in RXRPC Functionality by Kernel.org

CVE-2025-38525

What is CVE-2025-38525?

A vulnerability in the Linux kernel affects the RXRPC functionality due to improper handling of interrupts during the assessment of MTU sizes for incoming calls. The rxrpc_assess_MTU_size() function is called from within rxrpc_new_incoming_call() while holding interrupts disabled, resulting in potential inconsistencies. A warning is triggered when the IP layer attempts to enable local bottom halves while interrupts are still disabled. The resolution involves relocating the call to rxrpc_assess_MTU_size() to occur without interrupt restrictions, thus ensuring smooth operation and improved stability.

References