CVE-2025-37892
mtd: inftlcore: Add error check for inftl_read_oob()
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: mtd: inftlcore: Add error check for inftl_read_oob() In INFTL_findwriteunit(), the return value of inftl_read_oob() need to be checked. A proper implementation can be found in INFTL_deleteblock(). The status will be set as SECTOR_IGNORE to break from the while-loop correctly if the inftl_read_oob() fails.
Timeline
- CVE published
- Record last updated
Affected versions
- Linux Linux
Version range not reported
- Linux Linux
2.6.18
References 9
git.kernel.org
- stable/c/b828d394308e8e00df0a6f57e7dabae609bb8b7b
- stable/c/0300e751170cf80c05ca1a762a7b449e8ca6b693
- stable/c/e7d6ceff95c55297f0ee8f9dbc4da5c558f30e9e
- stable/c/6af3b92b1c0b58ca281d0e1501bad2567f73c1a5
- stable/c/7772621041ee78823ccc5f1fe38f6faa22af7023
- stable/c/5479a6af3c96f73bec2d2819532b6d6814f52dd6
- stable/c/1c22356dfb041e5292835c9ff44d5f91bef8dd18
- stable/c/114d94f095aa405fa9a51484c4be34846d7bb386
- stable/c/d027951dc85cb2e15924c980dc22a6754d100c7c