In the Linux kernel, the following vulnerability has been resolved:
mtd: nand: ecc-mxic: Fix use of uninitialized variable ret
If ctx->steps is zero, the loop processing ECC steps is skipped, and the variable ret remains uninitialized. It is later checked and returned, which leads to undefined behavior and may cause unpredictable results in user space or kernel crashes.
This scenario can be triggered in edge cases such as misconfigured geometry, ECC engine misuse, or if ctx->steps is not validated after initialization.
Initialize ret to zero before the loop to ensure correct and safe behavior regardless of the ctx->steps value.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 11, 2025 | Jul 11, 2025 |
| Suse | — | Upgrade kernel-default-baseUpgrade kernel-default-livepatch-develUpgrade kernel-debug-vdsoUpgrade kernel-obs-buildUpgrade dtb-sprdUpgrade kernel-azure-optionalUpgrade kernel-debugUpgrade kernel-rt-optionalUpgrade dtb-nvidiaUpgrade dtb-alteraUpgrade kernel-azureUpgrade kernel-rt-develUpgrade dtb-broadcomUpgrade dtb-amdUpgrade dtb-hisiliconUpgrade ocfs2-kmp-64kbUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-64kb-develUpgrade kernel-rt-extraUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade dtb-allwinnerUpgrade kernel-defaultUpgrade kernel-source-rtUpgrade kernel-rt_debug-develUpgrade dtb-lgUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-default-livepatchUpgrade reiserfs-kmp-azureUpgrade kernel-devel-rtUpgrade dtb-freescaleUpgrade cluster-md-kmp-rtUpgrade dtb-exynosUpgrade kselftests-kmp-azureUpgrade dtb-xilinxUpgrade kernel-64kb-extraUpgrade kernel-source-azureUpgrade kernel-rt-livepatchUpgrade dtb-caviumUpgrade dtb-renesasUpgrade dlm-kmp-rtUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-default-optionalUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade dtb-rockchipUpgrade dlm-kmp-64kbUpgrade dtb-marvellUpgrade kernel-default-extraUpgrade kernel-macrosUpgrade kernel-kvmsmallUpgrade kernel-64kb-optionalUpgrade kernel-syms-azureUpgrade kernel-default-develUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-develUpgrade kernel-obs-qaUpgrade dtb-qcomUpgrade kernel-rt-livepatch-develUpgrade kernel-sourceUpgrade kernel-rt-vdsoUpgrade kernel-rtUpgrade dtb-socionextUpgrade gfs2-kmp-rtUpgrade dtb-amlogicUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kernel-syms-rtUpgrade dtb-mediatekUpgrade kernel-symsUpgrade dtb-apmUpgrade kernel-64kbUpgrade dlm-kmp-defaultUpgrade kernel-azure-vdsoUpgrade kernel-docsUpgrade kernel-azure-extraUpgrade kernel-azure-develUpgrade dtb-armUpgrade reiserfs-kmp-rtUpgrade kernel-docs-htmlUpgrade kernel-default-base-rebuildUpgrade kselftests-kmp-rtUpgrade dtb-appleUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-vdsoUpgrade kernel-devel-azureUpgrade dtb-amazonUpgrade dlm-kmp-azure | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-gcp-fipsUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-oem-24.04aUpgrade linux-image-virtual-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-generic-6.8Upgrade linux-image-raspiUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-raspi-6.14Upgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-aws-lts-24.04Upgrade linux-image-azure-6.8Upgrade linux-image-generic-6.14Upgrade linux-image-gcp-6.14Upgrade linux-image-xilinx-6.8Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-aws-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-xilinxUpgrade linux-image-aws-fips-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-awsUpgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.14.0-1013-awsUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-virtual-6.14Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-aws-64kUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-aws-6.14Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-aws-64k-6.14Upgrade linux-image-oem-22.04dUpgrade linux-image-oem-24.04cUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-oem-24.04Upgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-azureUpgrade linux-image-azure-fipsUpgrade linux-image-gcpUpgrade linux-image-nvidia-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-realtimeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-gke-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-gke-64kUpgrade linux-image-raspi-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-kvmUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-realtime-6.14Upgrade linux-image-azure-fips-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-oracle-6.14Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-genericUpgrade linux-image-lowlatencyUpgrade linux-image-oem-6.14Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-oracleUpgrade linux-image-6.14.0-1012-oemUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-generic-64k-6.14Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-virtualUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-azure-6.14Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-fipsUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-oem-22.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidiaUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.14.0-1012-azureUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oem-24.04bUpgrade linux-image-lowlatency-6.8Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-ibmUpgrade linux-image-gcp-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-aws-fipsUpgrade linux-image-azure-lts-24.04Upgrade linux-image-gkeUpgrade linux-image-6.14.0-32-generic | Jul 14, 2025 | Jul 10, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Jul 10, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub