Log in Start free

Vulnerability · Published Jul 10, 2025 · Assigned by Linux

CVE-2025-38336ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330

Medium 5.5

In plain English

A medium-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 10% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)5.5Medium
Exploit odds (30 days)0.2%top 90.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330 The controller has a hardware bug that can hard hang the system when doing ATAPI DMAs without any trace of what happened. Depending on the device attached, it can also prevent the system from booting. In this case, the system hangs when reading the ATIP from optical media with cdrecord -vvv -atip on an _NEC DVD_RW ND-4571A 1-01 and an Optiarc DVD RW AD-7200A 1.06 attached to an ASRock 990FX Extreme 4, running at UDMA/33. The issue can be reproduced by running the same command with a cygwin build of cdrecord on WinXP, although it requires more attempts to cause it. The hang in that case is also resolved by forcing PIO. It doesn't appear that VIA has produced any drivers for that OS, thus no known workaround exists. HDDs attached to the controller do not suffer from any DMA issues.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.1.147-1DEBIAN-CVE-2025-38336
Debian:13linux6.12.35-1DEBIAN-CVE-2025-38336
Debian:14linux6.12.35-1DEBIAN-CVE-2025-38336
Ubuntu:22.04:LTSlinux5.15.0-156.166UBUNTU-CVE-2025-38336
Ubuntu:24.04:LTSlinux6.8.0-100.100UBUNTU-CVE-2025-38336
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2025-38336
Ubuntu:22.04:LTSlinux-aws5.15.0-1092.99UBUNTU-CVE-2025-38336
Ubuntu:24.04:LTSlinux-aws6.8.0-1046.49UBUNTU-CVE-2025-38336
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2025-38336
Ubuntu:24.04:LTSlinux-aws-6.146.14.0-1015.15~24.04.1UBUNTU-CVE-2025-38336
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2025-38336
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2025-38336
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1046.49~22.04.1UBUNTU-CVE-2025-38336
Ubuntu:22.04:LTSlinux-azure5.15.0-1096.105UBUNTU-CVE-2025-38336
Ubuntu:24.04:LTSlinux-azure6.8.0-1046.52UBUNTU-CVE-2025-38336
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2025-38336
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2025-38336
Ubuntu:24.04:LTSlinux-azure-6.146.14.0-1014.14~24.04.1UBUNTU-CVE-2025-38336
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2025-38336
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2025-38336
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1051.57~22.04.1UBUNTU-CVE-2025-38336
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1096.105.1UBUNTU-CVE-2025-38336
Ubuntu:24.04:LTSlinux-azure-fde6.8.0-1046.53UBUNTU-CVE-2025-38336
Ubuntu:25.10linux-azure-fdeno fix listedUBUNTU-CVE-2025-38336
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2025-38336
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2025-38336
Ubuntu:22.04:LTSlinux-azure-fde-6.86.8.0-1046.53~22.04.1UBUNTU-CVE-2025-38336
Ubuntu:24.04:LTSlinux-azure-nvidiano fix listedUBUNTU-CVE-2025-38336
Ubuntu:24.04:LTSlinux-azure-nvidia-6.146.14.0-1007.7UBUNTU-CVE-2025-38336
Ubuntu:22.04:LTSlinux-gcp5.15.0-1092.101UBUNTU-CVE-2025-38336
Ubuntu:24.04:LTSlinux-gcp6.8.0-1047.50UBUNTU-CVE-2025-38336
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2025-38336
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2025-38336
Ubuntu:24.04:LTSlinux-gcp-6.146.14.0-1018.19~24.04.1UBUNTU-CVE-2025-38336
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2025-38336
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2025-38336
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1047.50~22.04.2UBUNTU-CVE-2025-38336
Ubuntu:22.04:LTSlinux-gke5.15.0-1089.95UBUNTU-CVE-2025-38336
Ubuntu:24.04:LTSlinux-gke6.8.0-1043.48UBUNTU-CVE-2025-38336
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1075.83UBUNTU-CVE-2025-38336
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1030.33UBUNTU-CVE-2025-38336
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2025-38336
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2025-38336
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2025-38336
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2025-38336
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-100.100~22.04.1UBUNTU-CVE-2025-38336
Ubuntu:22.04:LTSlinux-ibm5.15.0-1086.89UBUNTU-CVE-2025-38336
Ubuntu:24.04:LTSlinux-ibm6.8.0-1044.44UBUNTU-CVE-2025-38336
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1044.44~22.04.1UBUNTU-CVE-2025-38336
Ubuntu:24.04:LTSlinux-intelno fix listedUBUNTU-CVE-2025-38336
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2025-38336
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1087.93UBUNTU-CVE-2025-38336
Ubuntu:22.04:LTSlinux-kvm5.15.0-1088.93UBUNTU-CVE-2025-38336
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-156.166UBUNTU-CVE-2025-38336
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-100.100.1UBUNTU-CVE-2025-38336
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2025-38336
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2025-38336
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2025-38336
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2025-38336
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-100.100.1~22.04.1UBUNTU-CVE-2025-38336
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1087.88UBUNTU-CVE-2025-38336
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1046.49UBUNTU-CVE-2025-38336
Ubuntu:24.04:LTSlinux-nvidia-6.11no fix listedUBUNTU-CVE-2025-38336
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2025-38336
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2025-38336
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1046.49~22.04.1UBUNTU-CVE-2025-38336
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1046.49.1UBUNTU-CVE-2025-38336
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1045.45UBUNTU-CVE-2025-38336
Ubuntu:24.04:LTSlinux-nvidia-tegra6.8.0-1020.20UBUNTU-CVE-2025-38336
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1034.34UBUNTU-CVE-2025-38336
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2025-38336
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2025-38336
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2025-38336
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2025-38336
Ubuntu:24.04:LTSlinux-oem-6.146.14.0-1014.14UBUNTU-CVE-2025-38336
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2025-38336
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2025-38336
Ubuntu:22.04:LTSlinux-oracle5.15.0-1090.96UBUNTU-CVE-2025-38336
Ubuntu:24.04:LTSlinux-oracle6.8.0-1043.44UBUNTU-CVE-2025-38336
Ubuntu:24.04:LTSlinux-oracle-6.146.14.0-1015.15~24.04.1UBUNTU-CVE-2025-38336
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2025-38336
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1043.44~22.04.1UBUNTU-CVE-2025-38336
Ubuntu:22.04:LTSlinux-raspi5.15.0-1086.89UBUNTU-CVE-2025-38336
Ubuntu:24.04:LTSlinux-raspi6.8.0-1047.51UBUNTU-CVE-2025-38336
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2025-38336
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-38336
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-38336
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-38336
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-38336
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2025-38336
Ubuntu:24.04:LTSlinux-riscv-6.146.14.0-34.34.1~24.04.1UBUNTU-CVE-2025-38336
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2025-38336
Ubuntu:22.04:LTSlinux-riscv-6.86.8.0-100.100~22.04.1UBUNTU-CVE-2025-38336
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2025-38336
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2025-38336
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2025-38336
Ubuntu:24.04:LTSlinux-xilinx6.8.0-1023.24UBUNTU-CVE-2025-38336
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1056.60UBUNTU-CVE-2025-38336

Affected products (as reported)

VendorProductVersions
Linux Linux 5955c7a2cfb6a35429adea5dc480002b15ca8cfc – before 67d66a5e4583fd3bcf13d6f747e571df13cbad515955c7a2cfb6a35429adea5dc480002b15ca8cfc – before 0d9a48dfa934f43ac839211ae4aeba34f666a9a55955c7a2cfb6a35429adea5dc480002b15ca8cfc – before 7fc89c218fc96a296a2840b1e37f4e0975f7a1085955c7a2cfb6a35429adea5dc480002b15ca8cfc – before 8212cd92fe40aae6fe5a073bc70e758c42bb4bfc5955c7a2cfb6a35429adea5dc480002b15ca8cfc – before 8edfed4439b107d62151ff6c075958d169da3e715955c7a2cfb6a35429adea5dc480002b15ca8cfc – before 947f9304d3c876c6672b947b80c0ef51161c6d2f5955c7a2cfb6a35429adea5dc480002b15ca8cfc – before bb7212ee4ff086628a2c1c22336d082a87cb893d5955c7a2cfb6a35429adea5dc480002b15ca8cfc – before d29fc02caad7f94b62d56ee1b01c954f9c961ba7
Linux Linux 2.6.29

References