In the Linux kernel, the following vulnerability has been resolved:
hwmon: (drivetemp) Fix driver producing garbage data when SCSI errors occur
scsi_execute_cmd() function can return both negative (linux codes) and positive (scsi_cmnd result field) error codes.
Currently the driver just passes error codes of scsi_execute_cmd() to hwmon core, which is incorrect because hwmon only checks for negative error codes. This leads to hwmon reporting uninitialized data to userspace in case of SCSI errors (for example if the disk drive was disconnected).
This patch checks scsi_execute_cmd() output and returns -EIO if it's error code is positive.
[groeck: Avoid inline variable declaration for portability]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxNo solution exists | May 15, 2025 | Jan 21, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Apr 1, 2025 | Jan 21, 2025 |
| Suse | — | Upgrade kernel-source-vanillaUpgrade reiserfs-kmp-defaultUpgrade dtb-hisiliconUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-rtUpgrade dtb-caviumUpgrade kernel-64kbUpgrade gfs2-kmp-64kbUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-64kbUpgrade kernel-defaultUpgrade kernel-default-develUpgrade kernel-debug-develUpgrade kernel-devel-rtUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade gfs2-kmp-azureUpgrade kernel-64kb-extraUpgrade dtb-renesasUpgrade dtb-allwinnerUpgrade kernel-rt_debugUpgrade dtb-sprdUpgrade dtb-amdUpgrade kernel-azure-extraUpgrade kernel-docs-htmlUpgrade dtb-freescaleUpgrade kernel-docsUpgrade dtb-xilinxUpgrade dtb-appleUpgrade kernel-64kb-optionalUpgrade kernel-develUpgrade dlm-kmp-azureUpgrade dtb-marvellUpgrade dtb-socionextUpgrade dtb-broadcomUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-azureUpgrade dtb-amazonUpgrade cluster-md-kmp-rtUpgrade kernel-default-optionalUpgrade kernel-debugUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-azureUpgrade kernel-symsUpgrade cluster-md-kmp-64kbUpgrade dtb-mediatekUpgrade kernel-rt-develUpgrade kernel-64kb-develUpgrade kernel-default-baseUpgrade kernel-rt_debug-develUpgrade kernel-default-livepatch-develUpgrade kernel-azure-develUpgrade kselftests-kmp-azureUpgrade kernel-default-extraUpgrade kernel-azure-optionalUpgrade dtb-amlogicUpgrade dtb-alteraUpgrade ocfs2-kmp-rtUpgrade kernel-devel-azureUpgrade kernel-default-base-rebuildUpgrade dtb-rockchipUpgrade dtb-armUpgrade kernel-zfcpdumpUpgrade kernel-azure-vdsoUpgrade reiserfs-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-macrosUpgrade kernel-kvmsmall-vdsoUpgrade kernel-obs-qaUpgrade kernel-rt-extraUpgrade dtb-exynosUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmall-develUpgrade kernel-rt-optionalUpgrade kernel-debug-vdsoUpgrade kernel-sourceUpgrade kernel-rtUpgrade kernel-source-rtUpgrade cluster-md-kmp-azureUpgrade dtb-qcomUpgrade dtb-nvidiaUpgrade dtb-lgUpgrade dtb-apmUpgrade dlm-kmp-64kbUpgrade kernel-source-azureUpgrade kselftests-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-rt-vdsoUpgrade kernel-syms-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmallUpgrade kernel-default-vdso | Feb 12, 2025 | Jan 21, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1016-azure-nvidiaUpgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-60-generic-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1030-gcp-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.1-1022-realtimeUpgrade linux-image-6.8.0-1030-gcpUpgrade linux-image-nvidiaUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1028-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-6.8.0-1026-oracleUpgrade linux-image-6.8.0-1012-gkeopUpgrade linux-image-6.8.0-60-lowlatency-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-1029-awsUpgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-gkeUpgrade linux-image-aws-lts-24.04Upgrade linux-image-genericUpgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-oem-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1029-azure-fdeUpgrade linux-image-6.8.0-1028-nvidiaUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1029-azureUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1028-oemUpgrade linux-image-generic-64kUpgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-6.11.0-1007-realtimeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1028-nvidia-lowlatencyUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-azureUpgrade linux-image-raspiUpgrade linux-image-6.8.0-60-lowlatencyUpgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-6.8.0-60-genericUpgrade linux-image-6.11.0-1011-awsUpgrade linux-image-6.8.0-1025-gkeUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-6.11.0-1011-gcpUpgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-awsUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-6.11.0-1012-azureUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.11.0-1017-oemUpgrade linux-image-6.8.0-1026-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1026-oracle-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1028-nvidia-64kUpgrade linux-image-azure-nvidiaUpgrade linux-image-oem-22.04dUpgrade linux-image-oem-22.04aUpgrade linux-image-ibm-classicUpgrade linux-image-azure-fdeUpgrade linux-image-6.11.0-21-genericUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-oem-22.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-ibmUpgrade linux-image-6.11.0-1011-gcp-64k | Mar 28, 2025 | Jan 21, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub