CVE-2025-38140
kernel: Linux kernel: Local denial of service in device mapper
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · July 3, 2025
Updated · July 8, 2026
Description
A flaw was found in the Linux kernel's device mapper (dm) component. A local attacker could exploit an issue in the dm_revalidate_zones() function, which improperly handles zoned devices with zone write plug resources. This could lead to the system attempting to read invalid memory, resulting in system instability or a denial of service (DoS).
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-131 · Incorrect Calculation of Buffer Size