In the Linux kernel, the following vulnerability has been resolved:
scsi: ufs: core: Fix invalid probe error return value
After DME Link Startup, the error return value is set to the MIPI UniPro GenericErrorCode which can be 0 (SUCCESS) or 1 (FAILURE). Upon failure during driver probe, the error code 1 is propagated back to the driver probe function which must return a negative value to indicate an error, but 1 is not negative, so the probe is considered to be successful even though it failed. Subsequently, removing the driver results in an oops because it is not in a valid state.
This happens because none of the callers of ufshcd_init() expect a non-negative error code.
Fix the return value and documentation to match actual usage.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-gcp-64kUpgrade linux-image-aws-64kUpgrade linux-image-virtual-6.17Upgrade linux-image-azureUpgrade linux-image-generic-64k-6.17Upgrade linux-image-aws-6.17Upgrade linux-image-raspi-6.17Upgrade linux-image-generic-6.17Upgrade linux-image-6.17.0-1007-aws-64kUpgrade linux-image-genericUpgrade linux-image-6.17.0-1008-azureUpgrade linux-image-aws-64k-6.17Upgrade linux-image-6.17.0-1006-realtimeUpgrade linux-image-raspiUpgrade linux-image-6.17.0-14-genericUpgrade linux-image-realtime-6.17Upgrade linux-image-6.17.0-1007-oracle-64kUpgrade linux-image-oracle-64kUpgrade linux-image-azure-6.17Upgrade linux-image-gcpUpgrade linux-image-generic-64kUpgrade linux-image-6.17.0-1007-oracleUpgrade linux-image-gcp-64k-6.17Upgrade linux-image-6.17.0-1007-gcpUpgrade linux-image-realtimeUpgrade linux-image-oracleUpgrade linux-image-awsUpgrade linux-image-gcp-6.17Upgrade linux-image-6.17.0-1007-gcp-64kUpgrade linux-image-virtualUpgrade linux-image-oracle-64k-6.17Upgrade linux-image-6.17.0-1007-awsUpgrade linux-image-oracle-6.17Upgrade linux-image-6.17.0-1008-raspiUpgrade linux-image-6.17.0-14-generic-64k | Dec 18, 2025 | Dec 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub