CVE-2025-38005 - dmaengine: ti: k3-udma: Add missing locking

Back Back to CVE browser

HIGH

dmaengine: ti: k3-udma: Add missing locking

Published Jun 18, 2025

7.8

HIGH

CVSS 3.1

EPSS 0.21%

Description

Recent kernels complain about a missing lock in k3-udma.c when the lock validator is enabled:

[ 4.128073] WARNING: CPU: 0 PID: 746 at drivers/dma/ti/../virt-dma.h:169 udma_start.isra.0+0x34/0x238 [ 4.137352] CPU: 0 UID: 0 PID: 746 Comm: kworker/0:3 Not tainted 6.12.9-arm64 #28 [ 4.144867] Hardware name: pp-v12 (DT) [ 4.148648] Workqueue: events udma_check_tx_completion [ 4.153841] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 4.160834] pc : udma_start.isra.0+0x34/0x238 [ 4.165227] lr : udma_start.isra.0+0x30/0x238 [ 4.169618] sp : ffffffc083cabcf0 [ 4.172963] x29: ffffffc083cabcf0 x28: 0000000000000000 x27: ffffff800001b005 [ 4.180167] x26: ffffffc0812f0000 x25: 0000000000000000 x24: 0000000000000000 [ 4.187370] x23: 0000000000000001 x22: 00000000e21eabe9 x21: ffffff8000fa0670 [ 4.194571] x20: ffffff8001b6bf00 x19: ffffff8000fa0430 x18: ffffffc083b95030 [ 4.201773] x17: 0000000000000000 x16: 00000000f0000000 x15: 0000000000000048 [ 4.208976] x14: 0000000000000048 x13: 0000000000000000 x12: 0000000000000001 [ 4.216179] x11: ffffffc08151a240 x10: 0000000000003ea1 x9 : ffffffc08046ab68 [ 4.223381] x8 : ffffffc083cabac0 x7 : ffffffc081df3718 x6 : 0000000000029fc8 [ 4.230583] x5 : ffffffc0817ee6d8 x4 : 0000000000000bc0 x3 : 0000000000000000 [ 4.237784] x2 : 0000000000000000 x1 : 00000000001fffff x0 : 0000000000000000 [ 4.244986] Call trace: [ 4.247463] udma_start.isra.0+0x34/0x238 [ 4.251509] udma_check_tx_completion+0xd0/0xdc [ 4.256076] process_one_work+0x244/0x3fc [ 4.260129] process_scheduled_works+0x6c/0x74 [ 4.264610] worker_thread+0x150/0x1dc [ 4.268398] kthread+0xd8/0xe8 [ 4.271492] ret_from_fork+0x10/0x20 [ 4.275107] irq event stamp: 220 [ 4.278363] hardirqs last enabled at (219): [<ffffffc080a27c7c>] _raw_spin_unlock_irq+0x38/0x50 [ 4.287183] hardirqs last disabled at (220): [<ffffffc080a1c154>] el1_dbg+0x24/0x50 [ 4.294879] softirqs last enabled at (182): [<ffffffc080037e68>] handle_softirqs+0x1c0/0x3cc [ 4.303437] softirqs last disabled at (177): [<ffffffc080010170>] __do_softirq+0x1c/0x28 [ 4.311559] ---[ end trace 0000000000000000 ]---

This commit adds the missing locking.

Affected products

Vendor Linux Product Linux Default
unaffected
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
Vendor Linux Product Linux Default
affected
- Version
  5.6
  Status
  affected
  Constraints
  -
- Version
  0
  Status
  unaffected
  Constraints
  <5.6
- Version
  5.10.238
  Status
  unaffected
  Constraints
  <=5.10.*
- Version
  5.15.184
  Status
  unaffected
  Constraints
  <=5.15.*
- Version
  6.1.140
  Status
  unaffected
  Constraints
  <=6.1.*
- Version
  6.12.30
  Status
  unaffected
  Constraints
  <=6.12.*
- Version
  6.14.8
  Status
  unaffected
  Constraints
  <=6.14.*
- Version
  6.15
  Status
  unaffected
  Constraints
  <=*
- Version
  6.6.92
  Status
  unaffected
  Constraints
  <=6.6.*

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Linux

unaffected

Version	Status	Constraints
	affected
	affected
	affected
	affected
	affected
	affected
	affected

Linux

affected

Version	Status	Constraints
5.6	affected	-
0	unaffected	<5.6
5.10.238	unaffected	<=5.10.*
5.15.184	unaffected	<=5.15.*
6.1.140	unaffected	<=6.1.*
6.12.30	unaffected	<=6.12.*
6.14.8	unaffected	<=6.14.*
6.15	unaffected	<=*
6.6.92	unaffected	<=6.6.*

Red Hat Enterprise Linux 10

kernel

Out of support scope
Red Hat Enterprise Linux 6

kernel

Not affected
Red Hat Enterprise Linux 7

kernel

Not affected
Red Hat Enterprise Linux 7

kernel-rt

Not affected
Red Hat Enterprise Linux 8

kernel

Not affected
Red Hat Enterprise Linux 8

kernel-rt

Not affected
Red Hat Enterprise Linux 9

kernel

Not affected
Red Hat Enterprise Linux 9

kernel-rt

Not affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 10	kernel	Out of support scope	n/a
Red Hat Enterprise Linux 6	kernel	Not affected	n/a
Red Hat Enterprise Linux 7	kernel	Not affected	n/a
Red Hat Enterprise Linux 7	kernel-rt	Not affected	n/a
Red Hat Enterprise Linux 8	kernel	Not affected	n/a
Red Hat Enterprise Linux 8	kernel-rt	Not affected	n/a
Red Hat Enterprise Linux 9	kernel	Not affected	n/a
Red Hat Enterprise Linux 9	kernel-rt	Not affected	n/a

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-414

References (14)

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2025-38005		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2373339		Issue Tracking
https://git.kernel.org/stable/c/0ea0433f822ed0549715f7044c9cd1cf132ff7fa		Patch
https://git.kernel.org/stable/c/26e63b2fe30c61bd25981c6084f67a8af79945d0		Patch
https://git.kernel.org/stable/c/27e71fa08711e09d81e06a54007b362a5426fd22		Patch
https://git.kernel.org/stable/c/99df1edf17493cb49a8c01f6bde55c3abb6a2a6c		Patch
https://git.kernel.org/stable/c/d87f1cddc592387359fde157cc4296556f6403c2		Patch
https://git.kernel.org/stable/c/df5987e76a4ae4cbd705d81ab4b15ed232250a4a		Patch
https://git.kernel.org/stable/c/fca280992af8c2fbd511bc43f65abb4a17363f2f		Patch
https://lists.debian.org/debian-lts-announce/2025/08/msg00010.html		Third Party Advisory
https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html		Third Party Advisory
https://lore.kernel.org/linux-cve-announce/2025061838-CVE-2025-38005-a02e@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2025-38005
https://www.cve.org/CVERecord?id=CVE-2025-38005

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Linux

Published Jun 18, 2025

Updated Aug 5, 2026

Reserved Apr 16, 2025

Link CVE-2025-38005

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jul 30, 2026

Link CVE-2025-38005

Red Hat

Severity Moderate

Public date Jun 18, 2025

Links CVE-2025-38005 - Bugzilla