CVE-2025-38031: 
Linux Kernel vulnerability analysis and mitigation

CVE-2025-38031 is a vulnerability discovered in the Linux kernel related to a reference count leak in the padata (parallel algorithm data) subsystem. The vulnerability was disclosed on June 18, 2025, affecting the padata reorder work functionality (NVD CVE, Debian Tracker).

The vulnerability stems from a reference count leak in the padata reorder work functionality. Specifically, the paralleldata refcount is incremented unconditionally, regardless of the return value of queuework(). When a work item is already queued, the incremented refcount is never decremented, leading to a reference count leak. This issue was introduced by a previous patch that addressed a Use-After-Free (UAF) vulnerability (NVD CVE).

The vulnerability results in a memory leak when using the cryptomgr_probe functionality, potentially leading to resource exhaustion over time. The issue manifests as an unreferenced object of size 192 bytes, which could accumulate and impact system performance (Wiz).

The issue has been fixed by modifying the code to check the return value of queue_work() and decrementing the refcount when necessary. The fix is available in Linux kernel version 6.12.32-1 and later. For Debian systems, the fix is included in the sid and trixie distributions (Debian Tracker).