PT-2025-4337 · Linux+5 · Linux Kernel+5
Published
2025-01-07
·
Updated
2026-04-20
·
CVE-2025-21656
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.74
Description
The issue concerns the Linux kernel, specifically the hwmon driver, which can produce garbage data when SCSI errors occur. The
scsi execute cmd() function can return both negative and positive error codes. However, the driver only passes these error codes to the hwmon core, which only checks for negative error codes. This leads to the hwmon reporting uninitialized data to userspace in case of SCSI errors, such as when a disk drive is disconnected. A patch has been applied to check the output of scsi execute cmd() and return -EIO if the error code is positive.Recommendations
For Linux kernel versions prior to 6.6.74, update to version 6.6.74 or later to resolve the issue. As a temporary workaround, consider restricting access to the
hwmon driver to minimize the risk of exploitation until a patch is applied. Avoid using the scsi execute cmd() function in scenarios where SCSI errors may occur until the issue is resolved.Exploit
Fix
Access of Uninitialized Pointer
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Debian
Linuxmint
Linux Kernel
Suse
Ubuntu