CVE-2025-38479: 
Linux Kernel vulnerability analysis and mitigation

CVE-2025-38479 is a vulnerability discovered in the Linux kernel's DMA engine, specifically in the Freescale eDMA (fsl-edma) driver. The vulnerability was disclosed on April 18, 2025, affecting the interrupt handling mechanism in the driver's remove path (NVD Database).

The vulnerability relates to improper interrupt request (IRQ) handling in the Freescale eDMA driver. The issue occurs specifically when freeing IRQ resources during the driver removal process on i.MX9 platforms. The technical impact manifests as a kernel warning at kernel/irq/devres.c:144 devmfreeirq+0x74/0x80. According to Red Hat's assessment, this vulnerability has been assigned a CVSS v3.1 base score of 5.5 with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (Red Hat CVE).

The vulnerability primarily affects system stability and can potentially lead to kernel dumps when the affected driver is being removed. The impact is limited to systems using the Freescale eDMA driver, particularly on i.MX9 platforms (Red Hat CVE).

The vulnerability has been fixed in Linux kernel version 6.12.25-1 for Debian systems. Various distributions have released patches, including Debian Bookworm (6.1.135-1) and Bullseye (5.10.234-1). Red Hat Enterprise Linux versions 6 through 9 are not affected by this vulnerability (Debian Tracker).