CVE-2025-38300

Name of the Vulnerable Software and Affected Versions: Linux kernel versions 6.15.0-rc3+ and earlier

Description: The Linux kernel contains a flaw within the sun8i-ce-cipher module related to error handling in the sun8i ce cipher prepare() function. This issue manifests as two DMA cleanup problems on error paths. Specifically, if dma map sg() fails during DMA mapping for the destination, the driver attempts to free unallocated DMA memory. Additionally, if dma map single() fails during IV mapping, the driver attempts to free an invalid DMA memory address. These conditions can lead to system instability.

Recommendations: Linux kernel versions prior to 6.15.0-rc3+ should be updated.