CVE-2025-38533
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
16/08/2025
Last modified:
18/08/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
net: libwx: fix the using of Rx buffer DMA<br />
<br />
The wx_rx_buffer structure contained two DMA address fields: &#39;dma&#39; and<br />
&#39;page_dma&#39;. However, only &#39;page_dma&#39; was actually initialized and used<br />
to program the Rx descriptor. But &#39;dma&#39; was uninitialized and used in<br />
some paths.<br />
<br />
This could lead to undefined behavior, including DMA errors or<br />
use-after-free, if the uninitialized &#39;dma&#39; was used. Althrough such<br />
error has not yet occurred, it is worth fixing in the code.