In the Linux kernel, the following vulnerability has been resolved:
dmaengine: ti: edma: Fix memory allocation size for queue_priority_map
Fix a critical memory allocation bug in edma_setup_from_hw() where
queue_priority_map was allocated with insufficient memory. The code
declared queue_priority_map as s8 (*)[2] (pointer to array of 2 s8),
but allocated memory using sizeof(s8) instead of the correct size.
This caused out-of-bounds memory writes when accessing:
queue_priority_map[i][0] = i;
queue_priority_map[i][1] = i;
The bug manifested as kernel crashes with "Oops - undefined instruction"
on ARM platforms (BeagleBoard-X15) during EDMA driver probe, as the
memory corruption triggered kernel hardening features on Clang.
Change the allocation to use sizeof(*queue_priority_map) which
automatically gets the correct size for the 2D array structure.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
20 Jan 2026, 20:41
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Linux
Debian Debian debian Linux Linux linux Kernel |
|
| CWE | CWE-125 | |
| CPE | cpe:2.3:o:linux:linux_kernel:6.17:rc5:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.17:rc4:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.17:rc2:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.17:rc3:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.17:rc1:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.1 |
| References | () https://git.kernel.org/stable/c/069fd1688c57c0cc8a3de64d108579b31676f74b - Patch | |
| References | () https://git.kernel.org/stable/c/1baed10553fc8b388351d8fc803e3ae6f1a863bc - Patch | |
| References | () https://git.kernel.org/stable/c/301a96cc4dc006c9a285913d301e681cfbf7edb6 - Patch | |
| References | () https://git.kernel.org/stable/c/5e462fa0dfdb52b3983cf41532d3d4c7d63e2f93 - Patch | |
| References | () https://git.kernel.org/stable/c/7d4de60d6db02d9b01d5890d5156b04fad65d07a - Patch | |
| References | () https://git.kernel.org/stable/c/d5e82f3f2c918d446df46e8d65f8083fd97cdec5 - Patch | |
| References | () https://git.kernel.org/stable/c/d722de80ce037dccf6931e778f4a46499d51bdf9 - Patch | |
| References | () https://git.kernel.org/stable/c/e63419dbf2ceb083c1651852209c7f048089ac0f - Patch | |
| References | () https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html - Third Party Advisory, Mailing List |
03 Nov 2025, 18:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
02 Oct 2025, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
23 Sep 2025, 06:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-09-23 06:15
Updated : 2026-01-20 20:41
NVD link : CVE-2025-39869
Mitre link : CVE-2025-39869
CVE.ORG link : CVE-2025-39869
JSON object : View
Products Affected
debian
- debian_linux
linux
- linux_kernel
CWE
CWE-125
Out-of-bounds Read