CVE-2025-38401

HighCVSS 7.8/10Last modified Jul 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

mtk-sd: Prevent memory corruption from DMA map failure

If msdc_prepare_data() fails to map the DMA region, the request is not prepared for data receiving, but msdc_start_data() proceeds the DMA with previous setting. Since this will lead a memory corruption, we have to stop the request operation soon after the msdc_prepare_data() fails to prepare it.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

VendorProductVersions
LinuxLinux>= 208489032bdd8d4a7de50f3057c175058f271956, < 5ac9e9e2e9cd6247d8c2d99780eae4556049e1cc; >= 208489032bdd8d4a7de50f3057c175058f271956, < d54771571f74a82c59830a32e76af78a8e57ac69; >= 208489032bdd8d4a7de50f3057c175058f271956, < 48bf4f3dfcdab02b22581d8e350a2d23130b72c0; >= 208489032bdd8d4a7de50f3057c175058f271956, < 63e8953f16acdcb23e2d4dd8a566d3c34df3e200; >= 208489032bdd8d4a7de50f3057c175058f271956, < 61cdd663564674ea21ceb50aa9d3697cbe9e45f9; >= 208489032bdd8d4a7de50f3057c175058f271956, < 3419bc6a7b65cbbb91417bb9970208478e034c79; >= 208489032bdd8d4a7de50f3057c175058f271956, < a5f5f67b284d81776d4a3eb1f8607e4b7f91f11c; >= 208489032bdd8d4a7de50f3057c175058f271956, < f5de469990f19569627ea0dd56536ff5a13beaa3
LinuxLinux4.2

References

Timeline

Published
Jul 25, 2025
Last modified
Jul 30, 2026
NVD status
Modified

Related CVEs from 2025

CVE-2025-384025.5In the Linux kernel, the following vulnerability has been resolved: idpf: return 0 size for RSS key if not supported Returning -EOPNOTSUPPCVE-2025-384037.8In the Linux kernel, the following vulnerability has been resolved: vsock/vmci: Clear the vmci transport packet properly when initializing CVE-2025-384045.5In the Linux kernel, the following vulnerability has been resolved: usb: typec: displayport: Fix potential deadlock The deadlock can occurCVE-2025-384055.5In the Linux kernel, the following vulnerability has been resolved: nvmet: fix memory leak of bio integrity If nvmet receives commands witCVE-2025-384065.5In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: remove WARN on bad firmware input If the firmware gives CVE-2025-384075.5In the Linux kernel, the following vulnerability has been resolved: riscv: cpu_ops_sbi: Use static array for boot_data Since commit 6b9f29CVE-2025-384085.5In the Linux kernel, the following vulnerability has been resolved: genirq/irq_sim: Initialize work context pointers properly Initialize `CVE-2025-384095.5In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix another leak in the submit error path put_unused_fd() doeCVE-2025-38419.8A vulnerability, which was classified as problematic, was found in wix-incubator jam up to e87a6fd85cf8fb5ff37b62b2d68f917219d07ae9. This afCVE-2025-384105.5In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix a fence leak in submit error path In error paths, we coulCVE-2025-384117.8In the Linux kernel, the following vulnerability has been resolved: netfs: Fix double put of request If a netfs request finishes during thCVE-2025-384125.5In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs ca
CVE-2025-38401: High severity, CVSS 7.8 | Vulnix