Memory Allocation Bug in Linux Kernel's EDMA Driver Affects ARM Platforms

CVE-2025-39869

What is CVE-2025-39869?

A critical issue has been identified in the Linux kernel related to the EDMA driver's memory allocation strategy. Specifically, the function 'edma_setup_from_hw()' improperly allocates memory for 'queue_priority_map'. This misallocation, where only 'sizeof(s8)' is used instead of the accurate size needed for a 2D array, results in out-of-bounds memory writes. This flaw has been observed to provoke kernel crashes, particularly evidenced as 'Oops - undefined instruction' errors on ARM architectures, such as the BeagleBoard-X15, during the EDMA driver probe. The suggested fix includes adjusting the memory allocation to utilize 'sizeof(*queue_priority_map)', ensuring correct memory sizing and enhancing system stability.

References