CVE-2025-37977

In the Linux kernel, the following vulnerability has been resolved:

scsi: ufs: exynos: Disable iocc if dma-coherent property isn't set

If dma-coherent property isn't set then descriptors are non-cacheable and the iocc shareability bits should be disabled. Without this UFS can end up in an incompatible configuration and suffer from random cache related stability issues.

This vulnerability is rated as Moderate because it requires local access on specific hardware architectures and results in system instability rather than code execution or information disclosure. The affected Samsung Exynos Universal Flash Storage (UFS) driver is intended for mobile SoCs and is not supported or enabled in Red Hat Enterprise Linux kernels. Consequently, default Red Hat enterprise deployments are not exposed to this flaw.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.