CVE-2025-38429
CriticalCVSS 10.0Exploitation Probability (EPSS)
Low risk31th percentile - higher than 31% of all known CVEs
Summary
In the Linux kernel MHI EP driver, the read pointer (rd_offset) is updated before the buffer is written, potentially causing race conditions where the host sees an updated pointer before the element is fully written, leading to data corruption.
Risk Assessment
An attacker could exploit this vulnerability to read incomplete or uninitialized data, leading to data corruption or potential information leakage.
Recommendation
Apply the Linux kernel patch that moves the buffer write before updating rd_offset to ensure the element is fully written before signaling its availability.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: bus: mhi: ep: Update read pointer only after buffer is written Inside mhi_ep_ring_add_element, the read pointer (rd_offset) is updated before the buffer is written, potentially causing race conditions where the host sees an updated read pointer before the buffer is actually written. Updating rd_offset prematurely can lead to the host accessing an uninitialized or incomplete element, resulting in data corruption. Invoke the buffer write before updating rd_offset to ensure the element is fully written before signaling its availability.