Riskcovery

CVE-2025-38095

dma-buf: insert memory barrier before updating num_fences

State
Published
Severity
7.8 High
Published
Jul 3, 2025
Updated
Oct 15, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

dma-buf: insert memory barrier before updating num_fences

smp_store_mb() inserts memory barrier after storing operation. It is different with what the comment is originally aiming so Null pointer dereference can be happened if memory update is reordered.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • a590d0fdbaa56f482ff515e1040b6d9b1b200d63 to before 90eb79c4ed98a4e24a62ccf61c199ab0f680fa8fAffected
  • a590d0fdbaa56f482ff515e1040b6d9b1b200d63 to before d0b7f11dd68b593bd970e5735be00e8d89bace30Affected
  • a590d0fdbaa56f482ff515e1040b6d9b1b200d63 to before 3becc659f9cb76b481ad1fb71f54d5c8d6332d3fAffected
  • a590d0fdbaa56f482ff515e1040b6d9b1b200d63 to before c9d2b9a80d06a58f37e0dc8c827075639b443927Affected
  • a590d0fdbaa56f482ff515e1040b6d9b1b200d63 to before fe1bebd0edb22e3536cbc920ec713331d1367ad4Affected
  • a590d0fdbaa56f482ff515e1040b6d9b1b200d63 to before 08680c4dadc6e736c75bc2409d833f03f9003c51Affected
  • a590d0fdbaa56f482ff515e1040b6d9b1b200d63 to before 72c7d62583ebce7baeb61acce6057c361f73be4aAffected
LinuxLinux
  • 5.0Affected
  • before 5.0Not affected
  • 5.10.241 through 5.10.*Not affected
  • 5.15.192 through 5.15.*Not affected
  • 6.1.140 through 6.1.*Not affected
  • 6.6.92 through 6.6.*Not affected
  • 6.12.30 through 6.12.*Not affected
  • 6.14.8 through 6.14.*Not affected
  • 6.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.