NetSight
IP …
high7.8

CVE-2025-38401

In the Linux kernel, the following vulnerability has been resolved: mtk-sd: Prevent memory corruption from DMA map failure If msdc_prepare_data() fails to map …

Impact

In the Linux kernel, the following vulnerability has been resolved: mtk-sd: Prevent memory corruption from DMA map failure If msdc_prepare_data() fails to map the DMA region, the request is not prepared for data receiving, but msdc_start_data() proceeds the DMA with previous setting. Since this will lead a memory corruption, we have to stop the request operation soon after the msdc_prepare_data() fails to prepare it.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.2 before 5.4.296
from 5.5 before 5.10.240
from 5.11 before 5.15.187
from 5.16 before 6.1.144
from 6.2 before 6.6.97
from 6.7 before 6.12.37
DebianDebian Linux
Version 11.0

Weakness classification

CWE-787

References