CVE-2025-38397

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

nvme-multipath: fix suspicious RCU usage warning

When I run the NVME over TCP test in virtme-ng, I get the following

"suspicious RCU usage" warning in nvme_mpath_add_sysfs_link():

'''

[ 5.024557][ T44] nvmet: Created nvm controller 1 for subsystem nqn.2025-06.org.nvmexpress.mptcp for NQN nqn.2014-08.org.nvmexpress:uuid:f7f6b5e0-ff97-4894-98ac-c85309e0bc77.

[ 5.027401][ T183] nvme nvme0: creating 2 I/O queues.

[ 5.029017][ T183] nvme nvme0: mapped 2/0/0 default/read/poll queues.

[ 5.032587][ T183] nvme nvme0: new ctrl: NQN "nqn.2025-06.org.nvmexpress.mptcp", addr 127.0.0.1:4420, hostnqn: nqn.2014-08.org.nvmexpress:uuid:f7f6b5e0-ff97-4894-98ac-c85309e0bc77

[ 5.042214][ T25]

[ 5.042440][ T25] =============================

[ 5.042579][ T25] WARNING: suspicious RCU usage

[ 5.042705][ T25] 6.16.0-rc3+ #23 Not tainted

[ 5.042812][ T25] -----------------------------

[ 5.042934][

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References