In the Linux kernel, the following vulnerability has been resolved:
mtd: nand: ecc-mxic: Fix use of uninitialized variable ret
If ctx->steps is zero, the loop processing ECC steps is skipped, and the variable ret remains uninitialized. It is later checked and returned, which leads to undefined behavior and may cause unpredictable results in user space or kernel crashes.
This scenario can be triggered in edge cases such as misconfigured geometry, ECC engine misuse, or if ctx->steps is not validated after initialization.
Initialize ret to zero before the loop to ensure correct and safe behavior regardless of the ctx->steps value.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 11, 2025 | Jul 11, 2025 |
| Suse | — | Upgrade kernel-kvmsmall-vdsoUpgrade dtb-appleUpgrade dtb-armUpgrade kernel-64kb-optionalUpgrade dlm-kmp-azureUpgrade dtb-marvellUpgrade kernel-zfcpdumpUpgrade kernel-azure-extraUpgrade kselftests-kmp-defaultUpgrade kernel-docsUpgrade reiserfs-kmp-rtUpgrade kernel-64kbUpgrade kernel-docs-htmlUpgrade kernel-macrosUpgrade kernel-kvmsmallUpgrade kernel-symsUpgrade kernel-default-base-rebuildUpgrade kernel-azure-develUpgrade kernel-azure-vdsoUpgrade kernel-devel-azureUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-rtUpgrade dtb-amazonUpgrade kernel-syms-rtUpgrade kernel-rt_debugUpgrade dtb-socionextUpgrade kernel-default-develUpgrade kernel-sourceUpgrade kernel-rtUpgrade kernel-rt-vdsoUpgrade kernel-default-extraUpgrade dtb-amlogicUpgrade dtb-apmUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade dtb-mediatekUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmall-develUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-syms-azureUpgrade ocfs2-kmp-rtUpgrade dtb-qcomUpgrade gfs2-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade kernel-debug-vdsoUpgrade kernel-debugUpgrade dtb-broadcomUpgrade kselftests-kmp-azureUpgrade kernel-default-optionalUpgrade gfs2-kmp-defaultUpgrade kernel-azureUpgrade dtb-sprdUpgrade kernel-azure-optionalUpgrade dtb-alteraUpgrade kernel-rt_debug-develUpgrade kernel-default-livepatchUpgrade dtb-lgUpgrade reiserfs-kmp-azureUpgrade kernel-source-rtUpgrade dtb-hisiliconUpgrade dtb-exynosUpgrade cluster-md-kmp-rtUpgrade kselftests-kmp-64kbUpgrade dtb-xilinxUpgrade dtb-rockchipUpgrade dtb-freescaleUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-rt-livepatchUpgrade kernel-devel-rtUpgrade kernel-develUpgrade kernel-debug-develUpgrade gfs2-kmp-azureUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-develUpgrade kernel-default-vdsoUpgrade dtb-nvidiaUpgrade kernel-64kb-develUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-defaultUpgrade dtb-allwinnerUpgrade kernel-rt-extraUpgrade kernel-default-baseUpgrade kernel-rt-optionalUpgrade kernel-obs-buildUpgrade dtb-amdUpgrade dlm-kmp-rtUpgrade dtb-renesasUpgrade dtb-cavium | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-ibm-classicUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-nvidiaUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-fipsUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-genericUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-gcp-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-oem-6.14Upgrade linux-image-aws-fipsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.14.0-32-genericUpgrade linux-image-azure-lts-24.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-gkeUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-oracle-6.14Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-gkeopUpgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.14.0-1012-oemUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-oem-24.04bUpgrade linux-image-ibmUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-64k-6.14Upgrade linux-image-virtualUpgrade linux-image-azure-6.14Upgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.14.0-1012-azureUpgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-generic-64k-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-oem-24.04aUpgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-virtual-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-realtimeUpgrade linux-image-oracle-6.8Upgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-raspiUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-raspi-6.14Upgrade linux-image-gcp-6.14Upgrade linux-image-azure-fips-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-virtual-6.14Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-realtime-6.8.1Upgrade linux-image-aws-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-6.14.0-1013-awsUpgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-gcp-64kUpgrade linux-image-gcpUpgrade linux-image-azureUpgrade linux-image-azure-fipsUpgrade linux-image-aws-64k-6.8Upgrade linux-image-aws-64k-6.14Upgrade linux-image-aws-6.14Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-oem-22.04dUpgrade linux-image-oem-24.04cUpgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-xilinxUpgrade linux-image-gke-64kUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-xilinx-6.8Upgrade linux-image-awsUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-ibm-6.8Upgrade linux-image-generic-64kUpgrade linux-image-gke-64k-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-realtime-6.14Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-raspi-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-24.04Upgrade linux-image-generic-6.14Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-gke-6.8 | Jul 14, 2025 | Jul 10, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Jul 10, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub