HighFix available
mtk-sd: Prevent memory corruption from DMA map failure
Type: advisorySources: OSV
In the Linux kernel, the following vulnerability has been resolved: mtk-sd: Prevent memory corruption from DMA map failure If msdc_prepare_data() fails to map the DMA region, the request is not prepared for data receiving, but msdc_start_data() proceeds the DMA with previous setting. Since this will lead a memory corruption, we have to stop the request operation soon after the msdc_prepare_data() fails to prepare it.
- Products
- Kernel
- Affected versions
- Not specified
- Fixed versions
- 5.10.240, 5.15.187, 5.4.296, 6.1.144, 6.12.37, 6.15.6, 6.6.97
- CVEs
- CVE-2025-38401
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 3 Nov 2026, 06:55 UTC · Revision 1
Source evidence
mtk-sd: Prevent memory corruption from DMA map failure
core-osv · Original sourcePublished 25 Jul 2025, 12:53 UTC
In the Linux kernel, the following vulnerability has been resolved: mtk-sd: Prevent memory corruption from DMA map failure If msdc_prepare_data() fails to map the DMA region, the request is not prepared for data receiving, but msdc_start_data() proceeds the DMA with previous setting. Since this will lead a memory corruption, we have to stop the request operation soon after the msdc_prepare_data() fails to prepare it.
osv:CVE-2025-38401
Kernel
Fixed versions: 5.4.296, 5.10.240, 5.15.187, 6.1.144, 6.6.97, 6.12.37, 6.15.6
Complete source record
{
"id": "f2af637b81feb4f9305ace11ccdd7872e95975c89ce08c2340239accd6afb52f",
"url": "https://osv.dev/vulnerability/CVE-2025-38401",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "mtk-sd: Prevent memory corruption from DMA map failure",
"summary": "In the Linux kernel, the following vulnerability has been resolved: mtk-sd: Prevent memory corruption from DMA map failure If msdc_prepare_data() fails to map the DMA region, the request is not prepared for data receiving, but msdc_start_data() proceeds the DMA with previous setting. Since this will lead a memory corruption, we have to stop the request operation soon after the msdc_prepare_data() fails to prepare it.",
"evidence": "osv:CVE-2025-38401",
"products": [
{
"name": {
"value": "Kernel",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.4.296",
"evidence": "/affected/1/ranges"
},
{
"value": "5.10.240",
"evidence": "/affected/1/ranges"
},
{
"value": "5.15.187",
"evidence": "/affected/1/ranges"
},
{
"value": "6.1.144",
"evidence": "/affected/1/ranges"
},
{
"value": "6.6.97",
"evidence": "/affected/1/ranges"
},
{
"value": "6.12.37",
"evidence": "/affected/1/ranges"
},
{
"value": "6.15.6",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
}
],
"severity": "high",
"structured": {
"id": "CVE-2025-38401",
"aliases": [
"CVE-2025-38401"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "208489032bdd8d4a7de50f3057c175058f271956"
},
{
"fixed": "5ac9e9e2e9cd6247d8c2d99780eae4556049e1cc"
},
{
"fixed": "d54771571f74a82c59830a32e76af78a8e57ac69"
},
{
"fixed": "48bf4f3dfcdab02b22581d8e350a2d23130b72c0"
},
{
"fixed": "63e8953f16acdcb23e2d4dd8a566d3c34df3e200"
},
{
"fixed": "61cdd663564674ea21ceb50aa9d3697cbe9e45f9"
},
{
"fixed": "3419bc6a7b65cbbb91417bb9970208478e034c79"
},
{
"fixed": "a5f5f67b284d81776d4a3eb1f8607e4b7f91f11c"
},
{
"fixed": "f5de469990f19569627ea0dd56536ff5a13beaa3"
}
]
}
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-38401.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.2.0"
},
{
"fixed": "5.4.296"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.5.0"
},
{
"fixed": "5.10.240"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.11.0"
},
{
"fixed": "5.15.187"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.16.0"
},
{
"fixed": "6.1.144"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.2.0"
},
{
"fixed": "6.6.97"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.7.0"
},
{
"fixed": "6.12.37"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.13.0"
},
{
"fixed": "6.15.6"
}
]
}
],
"package": {
"name": "Kernel",
"ecosystem": "Linux"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-38401.json"
}
}
],
"modified": "2026-10-28T02:30:26.783864732Z",
"provider": "osv",
"references": [
"https://git.kernel.org/stable/c/3419bc6a7b65cbbb91417bb9970208478e034c79",
"https://git.kernel.org/stable/c/48bf4f3dfcdab02b22581d8e350a2d23130b72c0",
"https://git.kernel.org/stable/c/5ac9e9e2e9cd6247d8c2d99780eae4556049e1cc",
"https://git.kernel.org/stable/c/61cdd663564674ea21ceb50aa9d3697cbe9e45f9",
"https://git.kernel.org/stable/c/63e8953f16acdcb23e2d4dd8a566d3c34df3e200",
"https://git.kernel.org/stable/c/a5f5f67b284d81776d4a3eb1f8607e4b7f91f11c",
"https://git.kernel.org/stable/c/d54771571f74a82c59830a32e76af78a8e57ac69",
"https://git.kernel.org/stable/c/f5de469990f19569627ea0dd56536ff5a13beaa3",
"https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html",
"https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html",
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38401.json",
"https://nvd.nist.gov/vuln/detail/CVE-2025-38401",
"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
],
"provider_metadata": {
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38401.json"
}
},
"related_cves": [
{
"value": "CVE-2025-38401",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 493184,
"published_at": "2025-07-25T12:53:44.961+00:00"
}