CVE-2025-38515

CVE-2025-38515 addresses a race condition in the Linux kernel's DRM subsystem, specifically affecting the drm/sched component. This flaw can lead to job scheduling stopping and system hangs due to a timing issue between spsc_queue_push and the run-job worker, impacting various Debian and Linux kernel distributions. The vulnerability has a CVSS score of 4.7 (Medium), indicating a local attack vector with high attack complexity, requiring low privileges, and resulting in high availability impact (system hangs). There is no confidentiality or integrity impact. Currently, there is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. Despite this, the CVE has garnered significant community attention with 3 mentions and 3 media articles, indicating awareness and discussion within security circles.