CVE-2025-38533

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
16/08/2025
Last modified:
18/08/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> net: libwx: fix the using of Rx buffer DMA<br /> <br /> The wx_rx_buffer structure contained two DMA address fields: &amp;#39;dma&amp;#39; and<br /> &amp;#39;page_dma&amp;#39;. However, only &amp;#39;page_dma&amp;#39; was actually initialized and used<br /> to program the Rx descriptor. But &amp;#39;dma&amp;#39; was uninitialized and used in<br /> some paths.<br /> <br /> This could lead to undefined behavior, including DMA errors or<br /> use-after-free, if the uninitialized &amp;#39;dma&amp;#39; was used. Althrough such<br /> error has not yet occurred, it is worth fixing in the code.

Impact