CVE-2025-38401
mtk-sd: Prevent memory corruption from DMA map failure
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
In the Linux kernel, the following vulnerability has been resolved: mtk-sd: Prevent memory corruption from DMA map failure If msdc_prepare_data() fails to map the DMA region, the request is
not prepared for data receiving, but msdc_start_data() proceeds
the DMA with previous setting.
Since this will lead a memory corruption, we have to stop the
request operation soon after the msdc_prepare_data() fails to
prepare it.
En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: mtk-sd: Prevenir la corrupción de memoria por un fallo en el mapeo de DMA. Si msdc_prepare_data() no logra mapear la región DMA, la solicitud no se prepara para la recepción de datos, pero msdc_start_data() continúa el DMA con la configuración anterior. Dado que esto provocará una corrupción de memoria, debemos detener la solicitud poco después de que msdc_prepare_data() no la prepare.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2025-04-16 CVE Reserved
- 2025-07-25 CVE Published
- 2025-07-28 CVE Updated
- 2025-07-31 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (9)
| URL | Tag | Source |
|---|---|---|
| https://git.kernel.org/stable/c/208489032bdd8d4a7de50f3057c175058f271956 | Vuln. Introduced |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | >= 4.2 < 5.4.296 Search vendor "Linux" for product "Linux Kernel" and version " >= 4.2 < 5.4.296" | en |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | >= 4.2 < 5.10.240 Search vendor "Linux" for product "Linux Kernel" and version " >= 4.2 < 5.10.240" | en |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | >= 4.2 < 5.15.187 Search vendor "Linux" for product "Linux Kernel" and version " >= 4.2 < 5.15.187" | en |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | >= 4.2 < 6.1.144 Search vendor "Linux" for product "Linux Kernel" and version " >= 4.2 < 6.1.144" | en |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | >= 4.2 < 6.6.97 Search vendor "Linux" for product "Linux Kernel" and version " >= 4.2 < 6.6.97" | en |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | >= 4.2 < 6.12.37 Search vendor "Linux" for product "Linux Kernel" and version " >= 4.2 < 6.12.37" | en |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | >= 4.2 < 6.15.6 Search vendor "Linux" for product "Linux Kernel" and version " >= 4.2 < 6.15.6" | en |
Affected
| ||||||
| Linux Search vendor "Linux" | Linux Kernel Search vendor "Linux" for product "Linux Kernel" | >= 4.2 < 6.16 Search vendor "Linux" for product "Linux Kernel" and version " >= 4.2 < 6.16" | en |
Affected
| ||||||