In the Linux kernel, the following vulnerability has been resolved:
hwmon: (drivetemp) Fix driver producing garbage data when SCSI errors occur
scsi_execute_cmd() function can return both negative (linux codes) and positive (scsi_cmnd result field) error codes.
Currently the driver just passes error codes of scsi_execute_cmd() to hwmon core, which is incorrect because hwmon only checks for negative error codes. This leads to hwmon reporting uninitialized data to userspace in case of SCSI errors (for example if the disk drive was disconnected).
This patch checks scsi_execute_cmd() output and returns -EIO if it's error code is positive.
[groeck: Avoid inline variable declaration for portability]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 15, 2025 | Jan 21, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade python3-perf | Apr 1, 2025 | Jan 21, 2025 |
| Suse | — | Upgrade kernel-devel-azureUpgrade kernel-rt-vdsoUpgrade kernel-syms-azureUpgrade kselftests-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade dtb-armUpgrade dtb-rockchipUpgrade kernel-rt-extraUpgrade kernel-kvmsmall-develUpgrade reiserfs-kmp-azureUpgrade kernel-default-extraUpgrade kernel-rt_debug-vdsoUpgrade gfs2-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-azure-develUpgrade kernel-azure-optionalUpgrade dtb-amlogicUpgrade kernel-default-vdsoUpgrade reiserfs-kmp-64kbUpgrade kernel-kvmsmallUpgrade dtb-qcomUpgrade dlm-kmp-64kbUpgrade dtb-nvidiaUpgrade kernel-rt-livepatch-develUpgrade kernel-rtUpgrade kernel-source-azureUpgrade kernel-azure-vdsoUpgrade dtb-apmUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-azureUpgrade dtb-lgUpgrade ocfs2-kmp-rtUpgrade kernel-macrosUpgrade kernel-kvmsmall-vdsoUpgrade kernel-sourceUpgrade kernel-obs-buildUpgrade cluster-md-kmp-defaultUpgrade dtb-exynosUpgrade kernel-obs-qaUpgrade kernel-debug-vdsoUpgrade kernel-source-rtUpgrade cluster-md-kmp-azureUpgrade kernel-rt-optionalUpgrade dtb-alteraUpgrade dtb-mediatekUpgrade reiserfs-kmp-defaultUpgrade dtb-hisiliconUpgrade ocfs2-kmp-defaultUpgrade dtb-amdUpgrade dtb-allwinnerUpgrade reiserfs-kmp-rtUpgrade kernel-default-develUpgrade kernel-defaultUpgrade kernel-debug-develUpgrade gfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade dtb-sprdUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-symsUpgrade kernel-default-baseUpgrade kernel-64kb-develUpgrade kernel-64kbUpgrade kernel-64kb-optionalUpgrade kernel-docsUpgrade kernel-develUpgrade dtb-xilinxUpgrade dtb-freescaleUpgrade dtb-appleUpgrade cluster-md-kmp-rtUpgrade kselftests-kmp-rtUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade dtb-caviumUpgrade kernel-docs-htmlUpgrade dtb-socionextUpgrade ocfs2-kmp-azureUpgrade dtb-marvellUpgrade dtb-broadcomUpgrade kernel-rt-develUpgrade kernel-azureUpgrade kernel-debugUpgrade dlm-kmp-defaultUpgrade dtb-amazonUpgrade kernel-rt_debug-develUpgrade kernel-default-livepatchUpgrade kernel-default-optionalUpgrade kernel-azure-extraUpgrade kernel-64kb-extraUpgrade gfs2-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade dtb-renesasUpgrade dlm-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-devel-rtUpgrade ocfs2-kmp-64kb | Feb 12, 2025 | Jan 21, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1016-azure-nvidiaUpgrade linux-image-virtualUpgrade linux-image-generic-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1030-gcpUpgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-6.8.1-1022-realtimeUpgrade linux-image-6.8.0-1029-azureUpgrade linux-image-gkeop-6.8Upgrade linux-image-oracleUpgrade linux-image-gcpUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1028-oemUpgrade linux-image-6.8.0-1029-azure-fdeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1028-nvidiaUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1026-oracleUpgrade linux-image-6.8.0-60-lowlatency-64kUpgrade linux-image-6.8.0-1029-awsUpgrade linux-image-oem-24.04aUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-gkeopUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1028-nvidia-lowlatency-64kUpgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-64kUpgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-realtimeUpgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-1012-gkeopUpgrade linux-image-6.8.0-1030-gcp-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-oem-22.04bUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-60-generic-64kUpgrade linux-image-genericUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-6.11.0-1007-realtimeUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-60-lowlatencyUpgrade linux-image-6.8.0-60-genericUpgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-6.8.0-1028-nvidia-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1026-ibmUpgrade linux-image-6.11.0-21-genericUpgrade linux-image-awsUpgrade linux-image-6.11.0-1011-awsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-raspiUpgrade linux-image-ibm-classicUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1028-nvidia-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1026-oracle-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-6.11.0-1012-azureUpgrade linux-image-6.11.0-1011-gcpUpgrade linux-image-6.8.0-1025-gkeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-azureUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.11.0-1017-oemUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-oem-22.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-ibmUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-kvm | Mar 28, 2025 | Jan 21, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub