CVE-2025-38043: firmware: arm_ffa: Set dma_mask for ffa devices
In the Linux kernel, the following vulnerability has been resolved:
firmware: armffa: Set dmamask for ffa devices
Set dmamask for FFA devices, otherwise DMA allocation using the device pointer lead to following warning:
WARNING: CPU: 1 PID: 1 at kernel/dma/mapping.c:597 dmaallocattrs+0xe0/0x124
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1 - Configuration
Set dma_mask for FFA devices so DMA allocation using the device pointer does not trigger a warning.
Linux kernel firmware: arm_ffa FFA devices dma_mask
Event History
Frequently Asked Questions
Which systems are exposed to this issue?
Systems running the Linux kernel with Arm FF-A devices are affected when DMA allocation is performed using an FF-A device pointer without a DMA mask configured. The provided data also identifies Debian Linux as affected software.
What level of access is needed to exploit the issue?
The CVSS vector indicates local access and low privileges are required. No user interaction is required.
What is the expected impact?
The issue is rated medium severity with a CVSS 3.1 score of 5.5. Its impact is limited to availability; confidentiality and integrity impacts are listed as none.
What should be done to remediate it?
Apply an available patch that sets the DMA mask for FF-A devices. Stable kernel patch references are provided in the advisory data.