CVE-2025-38533

In the Linux kernel, the following vulnerability has been resolved:

net: libwx: fix the using of Rx buffer DMA

The wx_rx_buffer structure contained two DMA address fields: 'dma' and 'page_dma'. However, only 'page_dma' was actually initialized and used to program the Rx descriptor. But 'dma' was uninitialized and used in some paths.

This could lead to undefined behavior, including DMA errors or use-after-free, if the uninitialized 'dma' was used. Althrough such error has not yet occurred, it is worth fixing in the code.

This flaw is evaluated with a Moderate severity impact because exploitation requires access to systems equipped with specific Wangxun Ethernet adapters and primarily presents a risk of memory corruption or denial of service. The vulnerability stems from improper handling of receive buffer DMA addresses within the Wangxun network driver support code. Red Hat Enterprise Linux is not vulnerable to this flaw as the affected driver framework is not included in supported product kernels.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.