CVE-2025-37892 — Unchecked Return Value in Linux
Severity
7.8HIGHNVD
OSV8.8OSV3.2
EPSS
0.1%
top 83.64%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMay 20
Latest updateMar 25
Description
In the Linux kernel, the following vulnerability has been resolved:
mtd: inftlcore: Add error check for inftl_read_oob()
In INFTL_findwriteunit(), the return value of inftl_read_oob()
need to be checked. A proper implementation can be
found in INFTL_deleteblock(). The status will be set as
SECTOR_IGNORE to break from the while-loop correctly
if the inftl_read_oob() fails.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9
Affected Packages4 packages
▶CVEListV5linux/linux8593fbc68b0df1168995de76d1af38eb62fd6b62 — b828d394308e8e00df0a6f57e7dabae609bb8b7b+9
Also affects: Debian Linux 11.0