CVE-2025-38401
kernel: mtk-sd: Prevent memory corruption from DMA map failure
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · July 25, 2025
Updated · October 30, 2026
Description
In the Linux kernel, the following vulnerability has been resolved:
mtk-sd: Prevent memory corruption from DMA map failure
If msdc_prepare_data() fails to map the DMA region, the request is not prepared for data receiving, but msdc_start_data() proceeds the DMA with previous setting. Since this will lead a memory corruption, we have to stop the request operation soon after the msdc_prepare_data() fails to prepare it.
Statement
This vulnerability does not affect supported Red Hat Enterprise Linux kernels because the MediaTek SD/MMC host controller driver is not enabled or shipped. The underlying flaw involves improper handling when direct memory access mapping fails within the MediaTek SD driver, which could result in memory corruption during subsequent operations. Because this hardware-specific controller is not supported or present in Red Hat enterprise kernels, standard deployments remain unaffected.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE not specified