CVE-2025-39869 dmaengine: ti: edma: Fix memory allocation size for queue_priority_map
A memory allocation bug in the TI EDMA driver causes out-of-bounds writes, leading to kernel crashes on ARM platforms.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-39869?
CVE-2025-39869 is a high-severity memory corruption vulnerability in Debian Debian Linux, published on 23 Sep 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
dmaengine: ti: edma: Fix memory allocation size for queue_priority_map
Fix a critical memory allocation bug in edma_setup_from_hw() where queue_priority_map was allocated with insufficient memory. The code declared queue_priority_map as s8 (*)[2] (pointer to array of 2 s8), but allocated memory using sizeof(s8) instead of the correct size.
This caused out-of-bounds memory writes when accessing: queue_priority_map[i][0] = i; queue_priority_map[i][1] = i;
The bug manifested as kernel crashes with "Oops - undefined instruction" on ARM platforms (BeagleBoard-X15) during EDMA driver probe, as the memory corruption triggered kernel hardening features on Clang.
Change the allocation to use sizeof(*queue_priority_map) which automatically gets the correct size for the 2D array structure.
Weakness: CWE-125
Which versions are affected by CVE-2025-39869?
It affects 2 products.
Products include Debian Debian Linux, Linux kernel.
How do I fix CVE-2025-39869?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2025-39869 being exploited?
There is no known exploitation of CVE-2025-39869 in the wild and no public exploit code.
Other vulnerabilities in Debian Debian Linux
Sources
Also known as BELL-CVE-2025-39869, DEBIAN-CVE-2025-39869, GHSA-mwhg-gwrr-ff82, ROOT-OS-DEBIAN-11-CVE-2025-39869, ROOT-OS-UBUNTU-2204-CVE-2025-39869, ROOT-OS-UBUNTU-2404-CVE-2025-39869 and 1 more.