DMA Mask Configuration Vulnerability in Linux Kernel - CVE-2025-38043
Summary
CVE-2025-38043: In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Set dma_mask for ffa devices Set dma_mask for FFA devices, otherwise DMA allocation using the device pointer lead to following warnin... Affects linux versions < 6.1.147-1. Fixed in 6.1.147-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services and managing hardware resources. It supports a wide range of devices and architectures, making it a critical element in system performance and security. This vulnerability specifically affects FFA (Firmware Framework for Arm) devices, which are designed to facilitate communication between different components in a system. The vulnerability arises from the lack of proper DMA (Direct Memory Access) mask configuration for these devices, potentially leading to system instability and security risks.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified related to the configuration of DMA masks for FFA devices. When the DMA mask is not set correctly, it can lead to warnings during DMA allocation, indicating potential memory access issues. This vulnerability can result in system crashes or unexpected behavior, as the kernel may attempt to access memory regions that are not allocated for the device, leading to data corruption or security breaches.
How To Fix
Minimum fixed version
6.1.147-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. However, ensuring that your system is regularly updated can help mitigate potential risks associated with unpatched vulnerabilities.
Conclusion
CVE-2025-38043 is a significant vulnerability in the Linux kernel that affects FFA devices due to improper DMA mask configuration. It is essential to update your system to the patched version to mitigate risks. Regular monitoring and updates are vital for maintaining system security.
See every vulnerability recorded for linux →
FAQ
CVE-2025-38043 is a vulnerability in the Linux kernel related to the configuration of DMA masks for FFA devices, which can lead to system instability.
If your system uses FFA devices without the proper DMA mask configuration, it may experience crashes or unexpected behavior due to improper memory access.
Yes, a patch is available for Debian 13 in version 6.12.32-1. It is advisable to update your system to this version.
While there are no specific workarounds, regularly monitoring your system and applying updates as soon as possible is crucial to maintaining security.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time. You can check your application against this vulnerability using the Vulert playground at Vulert Scanner without requiring any signup.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
