CVE-2025-38533: net: libwx: fix the using of Rx buffer DMA
In the Linux kernel, the following vulnerability has been resolved:
net: libwx: fix the using of Rx buffer DMA
The wxrxbuffer structure contained two DMA address fields: 'dma' and 'pagedma'. However, only 'pagedma' was actually initialized and used to program the Rx descriptor. But 'dma' was uninitialized and used in some paths.
This could lead to undefined behavior, including DMA errors or use-after-free, if the uninitialized 'dma' was used. Althrough such error has not yet occurred, it is worth fixing in the code.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38533?
The severity of CVE-2025-38533 is classified as moderate.
How do I fix CVE-2025-38533?
To fix CVE-2025-38533, ensure that you update to the latest Linux Kernel version that has addressed this vulnerability.
What components are affected by CVE-2025-38533?
CVE-2025-38533 affects the network stack within the Linux Kernel, specifically related to the Rx buffer DMA handling.
Is CVE-2025-38533 exploitable?
CVE-2025-38533 may allow for local escalation of privileges if exploited, depending on the specific system configuration.
When was CVE-2025-38533 published?
CVE-2025-38533 was published in 2025 as part of the ongoing security assessments for the Linux Kernel.