In the Linux kernel, the following vulnerability has been resolved:
mtd: nand: ecc-mxic: Fix use of uninitialized variable ret
If ctx->steps is zero, the loop processing ECC steps is skipped, and the variable ret remains uninitialized. It is later checked and returned, which leads to undefined behavior and may cause unpredictable results in user space or kernel crashes.
This scenario can be triggered in edge cases such as misconfigured geometry, ECC engine misuse, or if ctx->steps is not validated after initialization.
Initialize ret to zero before the loop to ensure correct and safe behavior regardless of the ctx->steps value.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Jul 11, 2025 | Jul 11, 2025 |
| Suse | — | Upgrade kernel-obs-qaUpgrade kernel-default-base-rebuildUpgrade dtb-apmUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-defaultUpgrade dtb-amlogicUpgrade kernel-rt-livepatch-develUpgrade kernel-syms-rtUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-zfcpdumpUpgrade kernel-devel-azureUpgrade kselftests-kmp-defaultUpgrade kernel-docs-htmlUpgrade reiserfs-kmp-rtUpgrade kernel-64kb-optionalUpgrade dlm-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-azure-vdsoUpgrade kernel-64kbUpgrade kernel-macrosUpgrade kernel-azure-extraUpgrade kernel-docsUpgrade kernel-symsUpgrade dtb-amazonUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-extraUpgrade dtb-appleUpgrade dtb-qcomUpgrade gfs2-kmp-64kbUpgrade kernel-default-develUpgrade dtb-armUpgrade kernel-sourceUpgrade kernel-rtUpgrade kernel-rt-vdsoUpgrade dtb-socionextUpgrade kernel-rt_debugUpgrade gfs2-kmp-rtUpgrade kernel-azure-develUpgrade dtb-marvellUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-rtUpgrade dtb-mediatekUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-obs-buildUpgrade kernel-source-azureUpgrade kernel-debug-develUpgrade kernel-64kb-extraUpgrade kernel-default-livepatch-develUpgrade kernel-default-baseUpgrade kernel-debug-vdsoUpgrade kernel-debugUpgrade kernel-azure-optionalUpgrade kernel-azureUpgrade dtb-alteraUpgrade dtb-sprdUpgrade kernel-default-vdsoUpgrade dtb-nvidiaUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-rt-extraUpgrade kernel-defaultUpgrade kernel-64kb-develUpgrade dtb-allwinnerUpgrade kernel-rt-develUpgrade ocfs2-kmp-defaultUpgrade dtb-caviumUpgrade dtb-amdUpgrade dtb-hisiliconUpgrade kernel-default-optionalUpgrade gfs2-kmp-defaultUpgrade dtb-renesasUpgrade dtb-broadcomUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-azureUpgrade dlm-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-default-livepatchUpgrade dtb-lgUpgrade reiserfs-kmp-azureUpgrade kernel-source-rtUpgrade kernel-rt-livepatchUpgrade kernel-devel-rtUpgrade kernel-develUpgrade gfs2-kmp-azureUpgrade dlm-kmp-64kbUpgrade dtb-exynosUpgrade cluster-md-kmp-rtUpgrade dtb-freescaleUpgrade kselftests-kmp-64kbUpgrade dtb-xilinxUpgrade dtb-rockchip | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-oem-24.04Upgrade linux-image-raspi-6.8Upgrade linux-image-realtime-6.14Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-raspi-realtimeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-intel-iotgUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-awsUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-6.14.0-1013-awsUpgrade linux-image-xilinxUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-aws-64kUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-nvidia-64kUpgrade linux-image-generic-64kUpgrade linux-image-gke-64k-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-gcp-6.14Upgrade linux-image-generic-6.14Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-raspi-6.14Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-xilinx-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-fips-6.8Upgrade linux-image-realtimeUpgrade linux-image-realtime-6.8.1Upgrade linux-image-virtual-6.14Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-oracle-64kUpgrade linux-image-aws-64k-6.14Upgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-gke-64kUpgrade linux-image-aws-6.14Upgrade linux-image-oem-24.04cUpgrade linux-image-gcp-64kUpgrade linux-image-generic-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-azureUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-azure-fipsUpgrade linux-image-gcpUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-gke-6.8Upgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-oracle-6.8Upgrade linux-image-raspiUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.14.0-1012-azureUpgrade linux-image-oem-24.04bUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-gkeopUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-fipsUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-oem-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-ibm-classicUpgrade linux-image-aws-fipsUpgrade linux-image-lowlatency-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-oem-6.14Upgrade linux-image-lowlatencyUpgrade linux-image-gcp-6.8Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-oracle-6.14Upgrade linux-image-generic-64k-6.14Upgrade linux-image-6.14.0-32-genericUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-virtualUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-azure-6.14Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-6.14.0-1012-oemUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-lowlatency-6.8 | Jul 14, 2025 | Jul 10, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Jul 10, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub