The Linux kernel mtd:rawnand:lpc32xx_slc driver incorrectly handles DMA transfer timeouts. The function lpc32xx_xmit_dma waits for a completion callback and ignores wait_for_completion_timeout, causing a timed‑out DMA transfer to remain mapped and the kernel to report success. The kernel then returns -ETIMEDOUT for the operation but the buffer may still be accessed, which can lead to kernel memory corruption or a panic. Based on the description, it is inferred that the flaw requires local or physical access to trigger the DMA timeout and can be exercised by code running with kernel privileges or a hardware attack that induces a timeout.

All Linux kernel releases that include the mtd/rawnand driver for LPC32xx SLC NAND devices before the patch. Any system firmware or embedded platform running an unpatched Linux kernel that uses an LPC32xx SLC NAND device is potentially affected.

The flaw can lead to denial of service and kernel memory corruption. The EPSS score is <1%, indicating a low probability of exploitation in the wild. The vulnerability is not listed in the CISA KEV catalog. No public exploits are known. Based on the description, it is inferred that the attacker requires local or physical access to the NAND hardware or kernel privileges to trigger the flaw. The impact is confined to the system kernel and could cause a kernel panic or data corruption if not mitigated.