In the Linux kernel, the following vulnerability has been resolved:
mtk-sd: Prevent memory corruption from DMA map failure
If msdcpreparedata() fails to map the DMA region, the request is not prepared for data receiving, but msdcstartdata() proceeds the DMA with previous setting. Since this will lead a memory corruption, we have to stop the request operation soon after the msdcpreparedata() fails to prepare it.
[
{
"id": "CVE-2025-38401-24297b9e",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@63e8953f16acdcb23e2d4dd8a566d3c34df3e200",
"target": {
"file": "drivers/mmc/host/mtk-sd.c"
},
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"228825232730921759979258920386320210658",
"93996228927102681304969248262215617747",
"17941399379794546353222111807432870602",
"8907379553566988757423927630272068487",
"6136528414291692253431559832559390735",
"228802083418590583856646254329091386691",
"184843353664446916934118585575840291846",
"54841465622230154958439217763454416796"
],
"threshold": 0.9
}
},
{
"id": "CVE-2025-38401-33d9de43",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@63e8953f16acdcb23e2d4dd8a566d3c34df3e200",
"target": {
"file": "drivers/mmc/host/mtk-sd.c",
"function": "msdc_ops_request"
},
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 405.0,
"function_hash": "102330041522850236402551952913016301788"
}
},
{
"id": "CVE-2025-38401-33da20c9",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f5de469990f19569627ea0dd56536ff5a13beaa3",
"target": {
"file": "drivers/mmc/host/mtk-sd.c",
"function": "msdc_ops_request"
},
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 424.0,
"function_hash": "66165179960304092618894498349010224224"
}
},
{
"id": "CVE-2025-38401-384bdcd6",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d54771571f74a82c59830a32e76af78a8e57ac69",
"target": {
"file": "drivers/mmc/host/mtk-sd.c",
"function": "msdc_ops_request"
},
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 405.0,
"function_hash": "102330041522850236402551952913016301788"
}
},
{
"id": "CVE-2025-38401-4115d6bc",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a5f5f67b284d81776d4a3eb1f8607e4b7f91f11c",
"target": {
"file": "drivers/mmc/host/mtk-sd.c",
"function": "msdc_ops_request"
},
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 424.0,
"function_hash": "66165179960304092618894498349010224224"
}
},
{
"id": "CVE-2025-38401-4433cfcc",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@61cdd663564674ea21ceb50aa9d3697cbe9e45f9",
"target": {
"file": "drivers/mmc/host/mtk-sd.c"
},
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"228825232730921759979258920386320210658",
"93996228927102681304969248262215617747",
"17941399379794546353222111807432870602",
"8907379553566988757423927630272068487",
"6136528414291692253431559832559390735",
"228802083418590583856646254329091386691",
"184843353664446916934118585575840291846",
"54841465622230154958439217763454416796"
],
"threshold": 0.9
}
},
{
"id": "CVE-2025-38401-64a70750",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f5de469990f19569627ea0dd56536ff5a13beaa3",
"target": {
"file": "drivers/mmc/host/mtk-sd.c"
},
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"228825232730921759979258920386320210658",
"93996228927102681304969248262215617747",
"17941399379794546353222111807432870602",
"53217170465485907250231690533051505233",
"302046242330214114391977765367858857779",
"228802083418590583856646254329091386691",
"184843353664446916934118585575840291846",
"54841465622230154958439217763454416796"
],
"threshold": 0.9
}
},
{
"id": "CVE-2025-38401-69d2db11",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@61cdd663564674ea21ceb50aa9d3697cbe9e45f9",
"target": {
"file": "drivers/mmc/host/mtk-sd.c",
"function": "msdc_ops_request"
},
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 405.0,
"function_hash": "102330041522850236402551952913016301788"
}
},
{
"id": "CVE-2025-38401-7ddb2862",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d54771571f74a82c59830a32e76af78a8e57ac69",
"target": {
"file": "drivers/mmc/host/mtk-sd.c"
},
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"228825232730921759979258920386320210658",
"93996228927102681304969248262215617747",
"17941399379794546353222111807432870602",
"8907379553566988757423927630272068487",
"6136528414291692253431559832559390735",
"228802083418590583856646254329091386691",
"184843353664446916934118585575840291846",
"54841465622230154958439217763454416796"
],
"threshold": 0.9
}
},
{
"id": "CVE-2025-38401-91fbb8fc",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3419bc6a7b65cbbb91417bb9970208478e034c79",
"target": {
"file": "drivers/mmc/host/mtk-sd.c",
"function": "msdc_ops_request"
},
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 405.0,
"function_hash": "102330041522850236402551952913016301788"
}
},
{
"id": "CVE-2025-38401-c1033162",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5ac9e9e2e9cd6247d8c2d99780eae4556049e1cc",
"target": {
"file": "drivers/mmc/host/mtk-sd.c",
"function": "msdc_ops_request"
},
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 405.0,
"function_hash": "102330041522850236402551952913016301788"
}
},
{
"id": "CVE-2025-38401-ccf4f09e",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5ac9e9e2e9cd6247d8c2d99780eae4556049e1cc",
"target": {
"file": "drivers/mmc/host/mtk-sd.c"
},
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"228825232730921759979258920386320210658",
"93996228927102681304969248262215617747",
"17941399379794546353222111807432870602",
"8907379553566988757423927630272068487",
"6136528414291692253431559832559390735",
"228802083418590583856646254329091386691",
"184843353664446916934118585575840291846",
"54841465622230154958439217763454416796"
],
"threshold": 0.9
}
},
{
"id": "CVE-2025-38401-f6c789f2",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a5f5f67b284d81776d4a3eb1f8607e4b7f91f11c",
"target": {
"file": "drivers/mmc/host/mtk-sd.c"
},
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"228825232730921759979258920386320210658",
"93996228927102681304969248262215617747",
"17941399379794546353222111807432870602",
"53217170465485907250231690533051505233",
"302046242330214114391977765367858857779",
"228802083418590583856646254329091386691",
"184843353664446916934118585575840291846",
"54841465622230154958439217763454416796"
],
"threshold": 0.9
}
},
{
"id": "CVE-2025-38401-fe106786",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3419bc6a7b65cbbb91417bb9970208478e034c79",
"target": {
"file": "drivers/mmc/host/mtk-sd.c"
},
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"228825232730921759979258920386320210658",
"93996228927102681304969248262215617747",
"17941399379794546353222111807432870602",
"8907379553566988757423927630272068487",
"6136528414291692253431559832559390735",
"228802083418590583856646254329091386691",
"184843353664446916934118585575840291846",
"54841465622230154958439217763454416796"
],
"threshold": 0.9
}
}
]