Memory Corruption in Linux Kernel's DMA Engine Component

CVE-2025-38538

What is CVE-2025-38538?

A vulnerability has been identified in the Linux kernel's DMA engine component, specifically in the nbpfaxi feature, where improper memory allocation leads to potential memory corruption. This issue arises from an overshoot in loop iterations while accessing the nbpf->chan[] array beyond its allocated size. Additionally, during data copying from the irqbuf[] array, error checks are included to prevent misalignment. With these safeguards, the earlier flaws in the original code that could result in erroneous iteration and subsequent return errors have been addressed, enhancing overall system integrity.

References