CVE-2025-38288: 
Linux Kernel vulnerability analysis and mitigation

CVE-2025-38288 is a vulnerability discovered in the Linux kernel, specifically affecting the SCSI smartpqi driver. The issue was disclosed on July 10, 2025, and involves incorrect usage of smpprocessorid() in preemptible kernels (NVD, Ubuntu).

The vulnerability occurs when smpprocessorid() is called in preemptible kernels within the smartpqi driver. The function smpprocessorid() checks if preemption is disabled and if not, issues an error message followed by a call to dump_stack(). The issue manifests as a kernel call trace when the function is called in preemptible kernel contexts (NVD).

When triggered, the vulnerability results in kernel call traces and potential system instability. The issue affects various Linux distributions including Ubuntu 25.04 and specific kernel versions in other distributions (Ubuntu).

The fix involves replacing smpprocessorid() with rawsmpprocessor_id() in the affected code paths. Many Linux distributions have already patched their kernel packages, with Ubuntu marking most releases as 'Not affected' except for version 25.04 which remains vulnerable (Ubuntu).