Riskcovery

CVE-2025-37866

mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show()

State
Published
Severity
Not scored
Published
May 9, 2025
Updated
May 11, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show()

A warning is seen when running the latest kernel on a BlueField SOC: [251.512704] ------------[ cut here ]------------ [251.512711] invalid sysfs_emit: buf:0000000003aa32ae [251.512720] WARNING: CPU: 1 PID: 705264 at fs/sysfs/file.c:767 sysfs_emit+0xac/0xc8

The warning is triggered because the mlxbf-bootctl driver invokes "sysfs_emit()" with a buffer pointer that is not aligned to the start of the page. The driver should instead use "sysfs_emit_at()" to support non-zero offsets into the destination buffer.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 9886f575de5aefcfab537467c72e5176e5301df0 to before 5e1dcc5bfd7a2896178c604bc69d6ab9650967daAffected
  • 9886f575de5aefcfab537467c72e5176e5301df0 to before b129005ddfc0e6daf04a6d3b928a9e474f9b3918Affected
LinuxLinux
  • 6.14Affected
  • before 6.14Not affected
  • 6.14.4 through 6.14.*Not affected
  • 6.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.