CVE-2025-38109 is a use-after-free vulnerability in the Linux kernel's mlx5 driver related to the embedded chip virtual ports (ECVF) on BlueField devices. The flaw occurs during shutdown flow when the vport ACL ingress table is not properly destroyed, leading to a refcount underflow and potential memory corruption. This issue affects the mlx5_eswitch component handling SR-IOV virtual functions on the embedded chip. The vulnerability has a high severity with a CVSS score of 7.8.