CVE-2025-38239: scsi: megaraid_sas: Fix invalid node index
In the Linux kernel, the following vulnerability has been resolved:
scsi: megaraidsas: Fix invalid node index
On a system with DRAM interleave enabled, out-of-bound access is detected:
megaraidsas 0000:3f:00.0: requested/available msix 128/128 pollqueue 0 ------------[ cut here ]------------ UBSAN: array-index-out-of-bounds in ./arch/x86/include/asm/topology.h:72:28 index -1 is out of range for type 'cpumask [1024]' dumpstacklvl+0x5d/0x80 ubsanepilogue+0x5/0x2b ubsanhandleoutofbounds.cold+0x46/0x4b megasasallocirqvectors+0x149/0x190 [megaraidsas] megasasprobeone.cold+0xa4d/0x189c [megaraidsas] localpciprobe+0x42/0x90 pcideviceprobe+0xdc/0x290 reallyprobe+0xdb/0x340 driverprobedevice+0x78/0x110 driverprobedevice+0x1f/0xa0 driverattach+0xba/0x1c0 busforeachdev+0x8b/0xe0 busadddriver+0x142/0x220 driverregister+0x72/0xd0 megasasinit+0xdf/0xff0 [megaraidsas] dooneinitcall+0x57/0x310 doinitmodule+0x90/0x250 initmodulefromfile+0x85/0xc0 idempotentinitmodule+0x114/0x310 x64sysfinitmodule+0x65/0xc0 dosyscall64+0x82/0x170 entrySYSCALL64afterhwframe+0x76/0x7e
Fix it accordingly.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Upgrade the Linux kernel to a version where the issue described as “In the Linux kernel… UBSAN: array-index-out-of-bounds … index -1 is out of range for type 'cpumask *[1024]’ … scsi: megaraid_sas: Fix invalid node index” is fixed, so the invalid node index bug with DRAM interleave enabled is resolved.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38239?
CVE-2025-38239 is classified as a critical vulnerability due to its potential for causing system crashes and denial of service.
How do I fix CVE-2025-38239?
To fix CVE-2025-38239, upgrade to the latest version of the Linux kernel or apply the provided patches.
What systems are affected by CVE-2025-38239?
CVE-2025-38239 affects systems running the Linux kernel with DRAM interleave enabled and using Broadcom MegaRAID SAS.
What type of vulnerability is CVE-2025-38239?
CVE-2025-38239 is an out-of-bounds access vulnerability that can lead to system instability.
Is there a workaround for CVE-2025-38239?
As a temporary workaround for CVE-2025-38239, consider disabling DRAM interleave until a fix is applied.