Skip to main content

Over 150 LLM Providers · Over 5,300 Models The most extensible AI-powered pentesting platform. Open source. Star on GitHub

CVE-2025-38042

5.5 · MEDIUM
Published Jun 18, 2025 linux EPSS 0.14% (4th pctl)

Overview

CVE-2025-38042 is a medium-severity vulnerability affecting linux linux_kernel. It was published on June 18, 2025 and has a CVSS 3.1 base score of 5.5 (MEDIUM).

This vulnerability has a CVSS 3.1 base score of 5.5, rated MEDIUM. It requires local or adjacent network access to exploit. Some level of privileges is required for exploitation.

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

dmaengine: ti: k3-udma-glue: Drop skip_fdq argument from k3_udma_glue_reset_rx_chn

The user of k3_udma_glue_reset_rx_chn() e.g. ti_am65_cpsw_nuss can

run on multiple platforms having different DMA architectures.

On some platforms there can be one FDQ for all flows in the RX channel

while for others there is a separate FDQ for each flow in the RX channel.

So far we have been relying on the skip_fdq argument of

k3_udma_glue_reset_rx_chn().

Instead of relying on the user to provide this information, infer it

based on DMA architecture during k3_udma_glue_request_rx_chn() and save it

in an internal flag 'single_fdq'. Use that flag at

k3_udma_glue_reset_rx_chn() to deicide if the FDQ needs

to be cleared for every flow or just for flow 0.

Fixes the below issue on ti_am65_cpsw_nuss driver on AM62-SK.

> ip link set eth1 down

> ip link set eth0 down

> ethtool -L eth0 rx 8

> ip link set eth0 up

> modprobe -r ti_am65_cpsw_nu

Remediation

Check the references section for vendor advisories and patches from linux. Update linux_kernel to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

Vendor Product Versions Status
linux linux_kernel >= 5.6, < 6.14.9 Affected

Frequently Asked Questions

What is CVE-2025-38042?

CVE-2025-38042 is a medium-severity vulnerability affecting linux linux_kernel. It was published on June 18, 2025 and has a CVSS 3.1 base score of 5.5 (MEDIUM).

How severe is CVE-2025-38042?

This vulnerability has a CVSS 3.1 base score of 5.5, rated MEDIUM. It requires local or adjacent network access to exploit. Some level of privileges is required for exploitation.

How do I fix or remediate CVE-2025-38042?

Check the references section for vendor advisories and patches from linux. Update linux_kernel to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

How can CyberStrike help with CVE-2025-38042?

CyberStrike's AI-powered security agents can automatically detect CVE-2025-38042 across your infrastructure using autonomous pentesting, DAST scanning, and HackBrowser. The platform continuously monitors for known vulnerabilities and provides actionable remediation guidance prioritized by real-world exploitability.