Linux Kernel Rx Buffer DMA Handling Vulnerability in Net Libwx

Vulnerability

A vulnerability exists in the Linux kernel's handling of DMA addresses for received packets in the wx_rx_buffer structure, specifically within the net libwx component. The issue arises because the 'dma' field, intended for DMA address management, was left uninitialized and could potentially be used incorrectly, leading to undefined behavior such as DMA errors or use-after-free conditions. Although this error has not yet been observed, it has been addressed in the code to prevent future occurrences.

Impact

The vulnerability could cause undefined behavior, including DMA errors or use-after-free conditions, if the uninitialized 'dma' field was used.

Remediation

Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed. Instructions for downloading the patched version are available on the Linux kernel official website.

Added: Aug 16, 2025, 12:39 PM
Updated: Aug 16, 2025, 12:39 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
5.3
remediation
7.7
relevance
0.4
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.