CVE-2025-38150 is a medium severity vulnerability in the Linux kernel's af_packet subsystem. It involves improper handling of notifier's packet_dev_mc within an RCU critical section, which can lead to a sleeping function being called from an invalid context. This issue arises when calling PACKET_ADD_MEMBERSHIP on an ops-locked device triggers the NETDEV_UNREGISTER notifier, requiring disabling promiscuous or allmulti mode that needs the netdev instance lock. The fix involves moving the call to packet_dev_mc outside the RCU critical section, ensuring proper locking with RTNL.