CVE-2025-22049: 
Linux Kernel vulnerability analysis and mitigation

CVE-2025-22049 is a vulnerability in the Linux kernel related to the LoongArch architecture's DMA alignment configuration. The issue was discovered and disclosed on April 16, 2025. The vulnerability affects the Linux kernel's handling of DMA alignment for LoongArch-specific devices (NVD CVE).

The vulnerability stems from the ARCHDMAMINALIGN being set to 1 by default, while LoongArch-specific devices (such as APBDMA) require 16 bytes alignment. When data buffer length is too small, the hardware may encounter errors during cacheline writing operations. The issue has received a CVSS v3.1 base score of 5.5 with a vector string of CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (Red Hat CVE).

The vulnerability can lead to hardware errors when writing to cacheline due to improper DMA buffer alignment. This primarily affects systems running the Linux kernel on LoongArch architecture, potentially causing system instability or crashes when allocating small memory buffers for DMA operations (NVD CVE).

The vulnerability has been resolved by increasing ARCHDMAMINALIGN to 16 bytes. This fix has been implemented in the Linux kernel version 6.12.25-1 and later. Debian has marked this version as fixed in their sid release (Debian Security).