In the Linux kernel, the following vulnerability has been resolved:
dma-buf: insert memory barrier before updating num_fences
smpstoremb() inserts memory barrier after storing operation. It is different with what the comment is originally aiming so Null pointer dereference can be happened if memory update is reordered.
[
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"13162515832844247799787110396513000954",
"59267096241833485044450008331050217271",
"164710778279412705869164897442685182465",
"325725796486432246264995009344061848084"
]
},
"target": {
"file": "drivers/dma-buf/dma-resv.c"
},
"signature_type": "Line",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3becc659f9cb76b481ad1fb71f54d5c8d6332d3f",
"signature_version": "v1",
"id": "CVE-2025-38095-2cb89d34"
},
{
"digest": {
"function_hash": "157999997822119471294586756862312107101",
"length": 678.0
},
"target": {
"function": "dma_resv_add_fence",
"file": "drivers/dma-buf/dma-resv.c"
},
"signature_type": "Function",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c9d2b9a80d06a58f37e0dc8c827075639b443927",
"signature_version": "v1",
"id": "CVE-2025-38095-3e147649"
},
{
"digest": {
"function_hash": "134758593365338186220676040849467663611",
"length": 639.0
},
"target": {
"function": "dma_resv_add_shared_fence",
"file": "drivers/dma-buf/dma-resv.c"
},
"signature_type": "Function",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d0b7f11dd68b593bd970e5735be00e8d89bace30",
"signature_version": "v1",
"id": "CVE-2025-38095-74225391"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"13162515832844247799787110396513000954",
"59267096241833485044450008331050217271",
"164710778279412705869164897442685182465",
"325725796486432246264995009344061848084"
]
},
"target": {
"file": "drivers/dma-buf/dma-resv.c"
},
"signature_type": "Line",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@08680c4dadc6e736c75bc2409d833f03f9003c51",
"signature_version": "v1",
"id": "CVE-2025-38095-8001a262"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"131982384802540138475891455824856852477",
"219677647173459220406264840325419751665",
"68482770887778463426695213838575460701",
"300483756808995821472230361423176234656"
]
},
"target": {
"file": "drivers/dma-buf/dma-resv.c"
},
"signature_type": "Line",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@90eb79c4ed98a4e24a62ccf61c199ab0f680fa8f",
"signature_version": "v1",
"id": "CVE-2025-38095-935838f3"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"13162515832844247799787110396513000954",
"59267096241833485044450008331050217271",
"164710778279412705869164897442685182465",
"325725796486432246264995009344061848084"
]
},
"target": {
"file": "drivers/dma-buf/dma-resv.c"
},
"signature_type": "Line",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fe1bebd0edb22e3536cbc920ec713331d1367ad4",
"signature_version": "v1",
"id": "CVE-2025-38095-9c2f24a8"
},
{
"digest": {
"function_hash": "157999997822119471294586756862312107101",
"length": 678.0
},
"target": {
"function": "dma_resv_add_fence",
"file": "drivers/dma-buf/dma-resv.c"
},
"signature_type": "Function",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@08680c4dadc6e736c75bc2409d833f03f9003c51",
"signature_version": "v1",
"id": "CVE-2025-38095-a3b3d567"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"13162515832844247799787110396513000954",
"59267096241833485044450008331050217271",
"164710778279412705869164897442685182465",
"325725796486432246264995009344061848084"
]
},
"target": {
"file": "drivers/dma-buf/dma-resv.c"
},
"signature_type": "Line",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@72c7d62583ebce7baeb61acce6057c361f73be4a",
"signature_version": "v1",
"id": "CVE-2025-38095-bd59952c"
},
{
"digest": {
"function_hash": "134758593365338186220676040849467663611",
"length": 639.0
},
"target": {
"function": "dma_resv_add_shared_fence",
"file": "drivers/dma-buf/dma-resv.c"
},
"signature_type": "Function",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@90eb79c4ed98a4e24a62ccf61c199ab0f680fa8f",
"signature_version": "v1",
"id": "CVE-2025-38095-c4c617dd"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"13162515832844247799787110396513000954",
"59267096241833485044450008331050217271",
"164710778279412705869164897442685182465",
"325725796486432246264995009344061848084"
]
},
"target": {
"file": "drivers/dma-buf/dma-resv.c"
},
"signature_type": "Line",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c9d2b9a80d06a58f37e0dc8c827075639b443927",
"signature_version": "v1",
"id": "CVE-2025-38095-c90c2811"
},
{
"digest": {
"function_hash": "157999997822119471294586756862312107101",
"length": 678.0
},
"target": {
"function": "dma_resv_add_fence",
"file": "drivers/dma-buf/dma-resv.c"
},
"signature_type": "Function",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3becc659f9cb76b481ad1fb71f54d5c8d6332d3f",
"signature_version": "v1",
"id": "CVE-2025-38095-cb2fae26"
},
{
"digest": {
"function_hash": "157999997822119471294586756862312107101",
"length": 678.0
},
"target": {
"function": "dma_resv_add_fence",
"file": "drivers/dma-buf/dma-resv.c"
},
"signature_type": "Function",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@72c7d62583ebce7baeb61acce6057c361f73be4a",
"signature_version": "v1",
"id": "CVE-2025-38095-e0f75ffd"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"131982384802540138475891455824856852477",
"219677647173459220406264840325419751665",
"68482770887778463426695213838575460701",
"300483756808995821472230361423176234656"
]
},
"target": {
"file": "drivers/dma-buf/dma-resv.c"
},
"signature_type": "Line",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d0b7f11dd68b593bd970e5735be00e8d89bace30",
"signature_version": "v1",
"id": "CVE-2025-38095-ec7d4c52"
},
{
"digest": {
"function_hash": "157999997822119471294586756862312107101",
"length": 678.0
},
"target": {
"function": "dma_resv_add_fence",
"file": "drivers/dma-buf/dma-resv.c"
},
"signature_type": "Function",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fe1bebd0edb22e3536cbc920ec713331d1367ad4",
"signature_version": "v1",
"id": "CVE-2025-38095-f03072f9"
}
]