Memory Corruption Vulnerability in Linux Kernel Affecting DMA Operations

CVE-2025-38401

What is CVE-2025-38401?

A vulnerability exists in the Linux kernel related to the mtk-sd subsystem that can lead to memory corruption. If the msdc_prepare_data() function fails to properly map the DMA region, the subsequent msdc_start_data() function erroneously proceeds with previous settings, potentially leading to unauthorized memory operations. This flaw necessitates immediate cessation of the request operation following a failure in data preparation to prevent memory corruption and ensure system integrity.

References