CVE-2025-38168 is a vulnerability in the Linux kernel's perf subsystem for arm-ni devices. It occurs when resource allocation fails in one clock domain of an NI device, but previously registered PMUs in other clock domains are not properly unregistered. This improper rollback can lead to kernel panics due to list corruption and fatal exceptions.