In the Linux kernel, the following vulnerability has been resolved:
mtd: nand: ecc-mxic: Fix use of uninitialized variable ret
If ctx->steps is zero, the loop processing ECC steps is skipped, and the variable ret remains uninitialized. It is later checked and returned, which leads to undefined behavior and may cause unpredictable results in user space or kernel crashes.
This scenario can be triggered in edge cases such as misconfigured geometry, ECC engine misuse, or if ctx->steps is not validated after initialization.
Initialize ret to zero before the loop to ensure correct and safe behavior regardless of the ctx->steps value.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 11, 2025 | Jul 11, 2025 |
| Suse | — | Upgrade kernel-default-livepatch-develUpgrade kernel-obs-buildUpgrade kernel-default-baseUpgrade kernel-rt-optionalUpgrade dtb-hisiliconUpgrade dtb-amdUpgrade kernel-debug-vdsoUpgrade kernel-azure-optionalUpgrade dtb-rockchipUpgrade dtb-xilinxUpgrade dtb-freescaleUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-rtUpgrade dtb-exynosUpgrade kselftests-kmp-64kbUpgrade kernel-debugUpgrade kernel-azureUpgrade kernel-rt-extraUpgrade kernel-source-vanillaUpgrade dtb-allwinnerUpgrade kernel-64kb-develUpgrade reiserfs-kmp-defaultUpgrade kernel-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-rt_debug-develUpgrade kernel-rt-develUpgrade kernel-source-rtUpgrade cluster-md-kmp-64kbUpgrade dtb-nvidiaUpgrade kernel-default-vdsoUpgrade reiserfs-kmp-azureUpgrade dtb-sprdUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade dtb-lgUpgrade dtb-broadcomUpgrade dtb-renesasUpgrade kernel-rt-livepatchUpgrade dlm-kmp-rtUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kernel-source-azureUpgrade dtb-caviumUpgrade dtb-alteraUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-devel-rtUpgrade gfs2-kmp-defaultUpgrade kernel-default-optionalUpgrade kselftests-kmp-azureUpgrade kernel-azure-vdsoUpgrade kernel-docs-htmlUpgrade kernel-default-base-rebuildUpgrade kernel-sourceUpgrade gfs2-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-rtUpgrade kernel-64kbUpgrade dtb-apmUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-docsUpgrade kernel-azure-extraUpgrade kernel-azure-develUpgrade dtb-armUpgrade kselftests-kmp-rtUpgrade dtb-appleUpgrade kernel-obs-qaUpgrade kernel-rt-livepatch-develUpgrade kernel-syms-azureUpgrade kernel-rt_debugUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-64kbUpgrade dtb-qcomUpgrade kernel-kvmsmall-develUpgrade kernel-default-extraUpgrade kernel-default-develUpgrade dtb-marvellUpgrade dtb-amazonUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-vdsoUpgrade kernel-devel-azureUpgrade kernel-64kb-optionalUpgrade dlm-kmp-azureUpgrade kselftests-kmp-defaultUpgrade dtb-socionextUpgrade kernel-symsUpgrade kernel-macrosUpgrade kernel-kvmsmallUpgrade kernel-syms-rtUpgrade dtb-amlogicUpgrade dtb-mediatek | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-virtual-6.8Upgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-generic-64k-6.8Upgrade linux-image-oem-24.04aUpgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-oem-24.04Upgrade linux-image-raspiUpgrade linux-image-oem-22.04cUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-azureUpgrade linux-image-oem-24.04cUpgrade linux-image-azure-fipsUpgrade linux-image-gcpUpgrade linux-image-gke-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-virtual-6.14Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-realtime-6.14Upgrade linux-image-raspi-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-aws-fips-6.8Upgrade linux-image-kvmUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.14.0-1013-awsUpgrade linux-image-generic-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-awsUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-aws-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-xilinxUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-generic-6.14Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-azure-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-gcp-6.14Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-raspi-6.14Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-aws-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-nvidia-6.8Upgrade linux-image-realtimeUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-aws-6.14Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-gcp-fipsUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-fips-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-aws-64k-6.14Upgrade linux-image-fipsUpgrade linux-image-6.14.0-1012-oemUpgrade linux-image-gkeop-6.8Upgrade linux-image-oem-6.14Upgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-oem-24.04bUpgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-6.8Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.14.0-1012-azureUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-ibm-classicUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-genericUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-generic-64k-6.14Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-azure-6.14Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-virtualUpgrade linux-image-ibmUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-nvidiaUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-6.14.0-32-genericUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-oracle-6.14Upgrade linux-image-aws-fipsUpgrade linux-image-azure-lts-24.04Upgrade linux-image-nvidia-lowlatency | Jul 14, 2025 | Jul 10, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Jul 10, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub