CVE-2025-37892

mtd: inftlcore: Add error check for inftl_read_oob()

State: Published
Severity: Not scored
Published: May 20, 2025
Updated: May 11, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

mtd: inftlcore: Add error check for inftl_read_oob()

In INFTL_findwriteunit(), the return value of inftl_read_oob() need to be checked. A proper implementation can be found in INFTL_deleteblock(). The status will be set as SECTOR_IGNORE to break from the while-loop correctly if the inftl_read_oob() fails.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	8593fbc68b0df1168995de76d1af38eb62fd6b62 to before b828d394308e8e00df0a6f57e7dabae609bb8b7bAffected 8593fbc68b0df1168995de76d1af38eb62fd6b62 to before 0300e751170cf80c05ca1a762a7b449e8ca6b693Affected 8593fbc68b0df1168995de76d1af38eb62fd6b62 to before e7d6ceff95c55297f0ee8f9dbc4da5c558f30e9eAffected 8593fbc68b0df1168995de76d1af38eb62fd6b62 to before 6af3b92b1c0b58ca281d0e1501bad2567f73c1a5Affected 8593fbc68b0df1168995de76d1af38eb62fd6b62 to before 7772621041ee78823ccc5f1fe38f6faa22af7023Affected 8593fbc68b0df1168995de76d1af38eb62fd6b62 to before 5479a6af3c96f73bec2d2819532b6d6814f52dd6Affected 8593fbc68b0df1168995de76d1af38eb62fd6b62 to before 1c22356dfb041e5292835c9ff44d5f91bef8dd18Affected 8593fbc68b0df1168995de76d1af38eb62fd6b62 to before 114d94f095aa405fa9a51484c4be34846d7bb386Affected 8593fbc68b0df1168995de76d1af38eb62fd6b62 to before d027951dc85cb2e15924c980dc22a6754d100c7cAffected
LinuxLinux	2.6.18Affected before 2.6.18Not affected 5.4.293 through 5.4.Not affected 5.10.237 through 5.10.Not affected 5.15.181 through 5.15.Not affected 6.1.135 through 6.1.Not affected 6.6.88 through 6.6.Not affected 6.12.24 through 6.12.Not affected 6.13.12 through 6.13.Not affected 6.14.3 through 6.14.Not affected 6.15 and laterNot affected

Product

Versions

LinuxLinux

8593fbc68b0df1168995de76d1af38eb62fd6b62 to before b828d394308e8e00df0a6f57e7dabae609bb8b7bAffected
8593fbc68b0df1168995de76d1af38eb62fd6b62 to before 0300e751170cf80c05ca1a762a7b449e8ca6b693Affected
8593fbc68b0df1168995de76d1af38eb62fd6b62 to before e7d6ceff95c55297f0ee8f9dbc4da5c558f30e9eAffected
8593fbc68b0df1168995de76d1af38eb62fd6b62 to before 6af3b92b1c0b58ca281d0e1501bad2567f73c1a5Affected
8593fbc68b0df1168995de76d1af38eb62fd6b62 to before 7772621041ee78823ccc5f1fe38f6faa22af7023Affected
8593fbc68b0df1168995de76d1af38eb62fd6b62 to before 5479a6af3c96f73bec2d2819532b6d6814f52dd6Affected
8593fbc68b0df1168995de76d1af38eb62fd6b62 to before 1c22356dfb041e5292835c9ff44d5f91bef8dd18Affected
8593fbc68b0df1168995de76d1af38eb62fd6b62 to before 114d94f095aa405fa9a51484c4be34846d7bb386Affected
8593fbc68b0df1168995de76d1af38eb62fd6b62 to before d027951dc85cb2e15924c980dc22a6754d100c7cAffected

LinuxLinux

2.6.18Affected
before 2.6.18Not affected
5.4.293 through 5.4.*Not affected
5.10.237 through 5.10.*Not affected
5.15.181 through 5.15.*Not affected
6.1.135 through 6.1.*Not affected
6.6.88 through 6.6.*Not affected
6.12.24 through 6.12.*Not affected
6.13.12 through 6.13.*Not affected
6.14.3 through 6.14.*Not affected
6.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.