In the Linux kernel, the following vulnerability has been resolved:
mtd: nand: ecc-mxic: Fix use of uninitialized variable ret
If ctx->steps is zero, the loop processing ECC steps is skipped, and the variable ret remains uninitialized. It is later checked and returned, which leads to undefined behavior and may cause unpredictable results in user space or kernel crashes.
This scenario can be triggered in edge cases such as misconfigured geometry, ECC engine misuse, or if ctx->steps is not validated after initialization.
Initialize ret to zero before the loop to ensure correct and safe behavior regardless of the ctx->steps value.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Jul 11, 2025 | Jul 11, 2025 |
| Suse | — | Upgrade kernel-source-rtUpgrade dtb-allwinnerUpgrade kernel-64kb-develUpgrade kernel-defaultUpgrade kernel-rt-extraUpgrade dlm-kmp-rtUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-source-vanillaUpgrade dtb-caviumUpgrade kernel-default-optionalUpgrade dtb-renesasUpgrade dtb-broadcomUpgrade reiserfs-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade dtb-lgUpgrade reiserfs-kmp-azureUpgrade dtb-alteraUpgrade dtb-sprdUpgrade kernel-debug-vdsoUpgrade kernel-default-baseUpgrade kernel-azureUpgrade kernel-default-livepatch-develUpgrade kernel-debugUpgrade kernel-obs-buildUpgrade kernel-rt-optionalUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kernel-rt-livepatchUpgrade kernel-debug-develUpgrade kernel-default-vdsoUpgrade kernel-source-azureUpgrade kernel-devel-rtUpgrade kernel-develUpgrade dtb-nvidiaUpgrade kernel-rt-develUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-azure-optionalUpgrade kernel-64kb-extraUpgrade dtb-exynosUpgrade dtb-rockchipUpgrade dtb-xilinxUpgrade kernel-rt_debug-develUpgrade dtb-hisiliconUpgrade dtb-freescaleUpgrade kselftests-kmp-64kbUpgrade kernel-default-livepatchUpgrade cluster-md-kmp-rtUpgrade dtb-amdUpgrade kernel-syms-rtUpgrade dtb-mediatekUpgrade dtb-apmUpgrade dtb-qcomUpgrade ocfs2-kmp-rtUpgrade kernel-rt_debugUpgrade kernel-symsUpgrade kernel-macrosUpgrade kernel-kvmsmallUpgrade kernel-azure-vdsoUpgrade kernel-64kbUpgrade reiserfs-kmp-rtUpgrade dtb-amlogicUpgrade kernel-docs-htmlUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade dtb-marvellUpgrade dlm-kmp-azureUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-devel-azureUpgrade kernel-64kb-optionalUpgrade dtb-amazonUpgrade kernel-syms-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-sourceUpgrade gfs2-kmp-rtUpgrade dtb-socionextUpgrade dtb-appleUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-docsUpgrade kernel-rt-vdsoUpgrade kernel-rtUpgrade kernel-azure-extraUpgrade kernel-azure-develUpgrade dtb-armUpgrade kernel-kvmsmall-develUpgrade kernel-default-extraUpgrade kernel-default-develUpgrade gfs2-kmp-64kb | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-aws-64k-6.14Upgrade linux-image-aws-64k-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-xilinxUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-oem-22.04bUpgrade linux-image-azureUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-oem-24.04cUpgrade linux-image-aws-6.14Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-gcp-64kUpgrade linux-image-gke-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-oem-24.04Upgrade linux-image-6.14.0-1013-awsUpgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-aws-64kUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-oem-24.04aUpgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-awsUpgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-ibm-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-generic-64kUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-xilinx-6.8Upgrade linux-image-raspiUpgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-gcp-6.14Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gcp-fipsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-azure-fips-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-generic-6.14Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-raspi-6.14Upgrade linux-image-intel-iotgUpgrade linux-image-raspi-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-kvmUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-realtime-6.14Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-realtimeUpgrade linux-image-fips-6.8Upgrade linux-image-virtual-6.14Upgrade linux-image-oracle-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-gke-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-6.14.0-32-genericUpgrade linux-image-oem-6.14Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-gcp-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-gkeopUpgrade linux-image-oracleUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.14.0-1012-oemUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-fipsUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-24.04bUpgrade linux-image-6.14.0-1012-azureUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-virtualUpgrade linux-image-oracle-6.14Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-ibmUpgrade linux-image-generic-64k-6.14Upgrade linux-image-azure-6.14Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1046-nvidia-64k | Jul 14, 2025 | Jul 10, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Jul 10, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub