CVE-2025-38533

net: libwx: fix the using of Rx buffer DMA

published August 16, 2025

CVSS
—
EPSS
0%
Percentile
22.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

net: libwx: fix the using of Rx buffer DMA

The wx_rx_buffer structure contained two DMA address fields: 'dma' and

'page_dma'. However, only 'page_dma' was actually initialized and used

to program the Rx descriptor. But 'dma' was uninitialized and used in

some paths.

This could lead to undefined behavior, including DMA errors or

use-after-free, if the uninitialized 'dma' was used. Althrough such

error has not yet occurred, it is worth fixing in the code.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00311 · 22.8th percentile
Published
2025-08-16T11:12Z
EPSS history
Timeline
  • 16 AUG 11:12Z
    net: libwx: fix the using of Rx buffer DMA
    cvelistv5