CVE Database›Document archive›CVE-2025-38401

CVE-2025-38401

kernel: mtk-sd: Prevent memory corruption from DMA map failure

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · July 25, 2025

Updated · October 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

mtk-sd: Prevent memory corruption from DMA map failure

If msdc_prepare_data() fails to map the DMA region, the request is not prepared for data receiving, but msdc_start_data() proceeds the DMA with previous setting. Since this will lead a memory corruption, we have to stop the request operation soon after the msdc_prepare_data() fails to prepare it.

Statement

This vulnerability does not affect supported Red Hat Enterprise Linux kernels because the MediaTek SD/MMC host controller driver is not enabled or shipped. The underlying flaw involves improper handling when direct memory access mapping fails within the MediaTek SD driver, which could result in memory corruption during subsequent operations. Because this hardware-specific controller is not supported or present in Red Hat enterprise kernels, standard deployments remain unaffected.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE not specified