CVE-2025-38372 addresses a vulnerability in the Linux kernel's RDMA mlx5 driver related to unsafe xarray access in implicit On-Demand Paging (ODP) handling. The issue involved using __xa_store() and __xa_erase() functions without proper locking, causing lockdep warnings due to unsafe Read-Copy-Update (RCU) usage. The vulnerability has been fixed by replacing these calls with xa_store() and xa_erase(), which handle locking internally. The flaw could lead to kernel instability or crashes due to improper synchronization.