Search: CVE-2025-38211

A use-after-free vulnerability in the Linux kernel's RDMA iwcm component was fixed by Red Hat. The flaw involves work objects associated with cm_id_private that could be accessed after being freed during cm_id destruction, leading to kernel bugs. This issue was reproducible with specific test cases involving the rdma transport and siw driver. Red Hat has released a security update for Red Hat Enterprise Linux 8 to address this vulnerability. The update requires a system reboot to take effect.