CVE-2025-38429 Details
Description
In the Linux kernel, the following vulnerability has been resolved: bus: mhi: ep: Update read pointer only after buffer is written Inside mhi_ep_ring_add_element, the read pointer (rd_offset) is updated before the buffer is written, potentially causing race conditions where the host sees an updated read pointer before the buffer is actually written. Updating rd_offset prematurely can lead to the host accessing an uninitialized or incomplete element, resulting in data corruption. Invoke the buffer write before updating rd_offset to ensure the element is fully written before signaling its availability.
A vulnerability in the Linux kernel's MHI (Mobile Host Interface) endpoint handling has been addressed. The issue arose because the read pointer was updated before the buffer was fully written, creating a potential race condition. This premature update could lead the host to access an uninitialized or incomplete element, causing data corruption. The vulnerability has been resolved by ensuring that the buffer is written before the read pointer is updated, preventing the host from seeing an available element that is not yet complete.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/0007ef098dab48f1ba58364c40b4809f1e21b130 | kernel.org | Patch |
| https://git.kernel.org/stable/c/44b9620e82bbec2b9a6ac77f63913636d84f96dc | kernel.org | Patch |
| https://git.kernel.org/stable/c/6f18d174b73d0ceeaa341f46c0986436b3aefc9a | kernel.org | Patch |
| https://git.kernel.org/stable/c/f704a80d9fa268e51a6cc5242714502c3c1fa605 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-908 | Use of Uninitialized Resource | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 5.19, < 6.6.95 >= 6.7, < 6.12.35 >= 6.13, < 6.15.4 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 30, 2026 | CVE Modified | kernel.org |
| Jun 17, 2026 | CVE Modified | kernel.org |
| Nov 19, 2025 | Initial Analysis | [email protected] |
| Jul 25, 2025 | New CVE Received | kernel.org |