CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

CVE-2025-37892: mtd: inftlcore: Add error check for inftl_read_oob()

Description

In the Linux kernel, the following vulnerability has been resolved:

mtd: inftlcore: Add error check for inftl_read_oob()

In INFTL_findwriteunit(), the return value of inftl_read_oob()
need to be checked. A proper implementation can be
found in INFTL_deleteblock(). The status will be set as
SECTOR_IGNORE to break from the while-loop correctly
if the inftl_read_oob() fails.

Classification

CVE ID: CVE-2025-37892

Affected Products

Vendor: Linux

Product: Linux

Exploit Prediction Scoring System (EPSS)

EPSS Score: 0.04% (probability of being exploited)

EPSS Percentile: 12.76% (scored less or equal to compared to others)

EPSS Date: 2025-06-18 (when was this score calculated)

References

Timeline

2025-05-20 12:40:11 UTC
CVE

mtd: inftlcore: Add error check for inftl_read_oob()