CVE-2025-37977

scsi: ufs: exynos: Disable iocc if dma-coherent property isn't set

State: Published
Severity: 7.8 High
Published: May 20, 2025
Updated: Oct 30, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: ufs: exynos: Disable iocc if dma-coherent property isn't set

If dma-coherent property isn't set then descriptors are non-cacheable and the iocc shareability bits should be disabled. Without this UFS can end up in an incompatible configuration and suffer from random cache related stability issues.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	cc52e15397cc5dc773d3c6792b98352d3209f93f to before aa64b94202d4453d616873ce318e19b064dfce04Affected cc52e15397cc5dc773d3c6792b98352d3209f93f to before b101fc9ac18d1ac434b703839a5117342a591792Affected cc52e15397cc5dc773d3c6792b98352d3209f93f to before 869749e48115ef944eeabec8e84138908471fa51Affected cc52e15397cc5dc773d3c6792b98352d3209f93f to before f0c6728a6f2e269ebb234a9b5bb6c2c24aafeb51Affected cc52e15397cc5dc773d3c6792b98352d3209f93f to before f92bb7436802f8eb7ee72dc911a33c8897fde366Affected
LinuxLinux	5.16Affected before 5.16Not affected 6.1.191 through 6.1.Not affected 6.6.160 through 6.6.Not affected 6.12.26 through 6.12.Not affected 6.14.4 through 6.14.Not affected 6.15 and laterNot affected

Product

Versions

LinuxLinux

cc52e15397cc5dc773d3c6792b98352d3209f93f to before aa64b94202d4453d616873ce318e19b064dfce04Affected
cc52e15397cc5dc773d3c6792b98352d3209f93f to before b101fc9ac18d1ac434b703839a5117342a591792Affected
cc52e15397cc5dc773d3c6792b98352d3209f93f to before 869749e48115ef944eeabec8e84138908471fa51Affected
cc52e15397cc5dc773d3c6792b98352d3209f93f to before f0c6728a6f2e269ebb234a9b5bb6c2c24aafeb51Affected
cc52e15397cc5dc773d3c6792b98352d3209f93f to before f92bb7436802f8eb7ee72dc911a33c8897fde366Affected

LinuxLinux

5.16Affected
before 5.16Not affected
6.1.191 through 6.1.*Not affected
6.6.160 through 6.6.*Not affected
6.12.26 through 6.12.*Not affected
6.14.4 through 6.14.*Not affected
6.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.