CVE-2025-21873: scsi: ufs: core: bsg: Fix crash when arpmb command fails
In the Linux kernel, the following vulnerability has been resolved:
scsi: ufs: core: bsg: Fix crash when arpmb command fails
If the device doesn't support arpmb we'll crash due to copying user data in bsgtransportsgiofn().
In the case where ufsbsgexecadvancedrpmbreq() returns an error, do not set the job's replylen.
Memory crash backtrace: 3,1290,531166405,-;ufshcd 0000:00:12.5: ARPMB OP failed: error code -22
4,1308,531166555,-;Call Trace:
4,1309,531166559,-; <TASK>
4,1310,531166565,-; ? showregs+0x6d/0x80
4,1311,531166575,-; ? die+0x37/0xa0
4,1312,531166583,-; ? dotrap+0xd4/0xf0
4,1313,531166593,-; ? doerrortrap+0x71/0xb0
4,1314,531166601,-; ? usercopyabort+0x6c/0x80
4,1315,531166610,-; ? excinvalidop+0x52/0x80
4,1316,531166622,-; ? usercopyabort+0x6c/0x80
4,1317,531166630,-; ? asmexcinvalidop+0x1b/0x20
4,1318,531166643,-; ? usercopyabort+0x6c/0x80
4,1319,531166652,-; checkheapobject+0xe3/0x120
4,1320,531166661,-; checkheapobject+0x185/0x1d0
4,1321,531166670,-; checkobjectsize.part.0+0x72/0x150
4,1322,531166679,-; checkobjectsize+0x23/0x30
4,1323,531166688,-; bsgtransportsgiofn+0x314/0x3b0
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-21873?
CVE-2025-21873 has been classified with a severity level that indicates a significant risk to system stability.
How do I fix CVE-2025-21873?
To fix CVE-2025-21873, update the Linux kernel to a version that includes the patch for this vulnerability.
What software versions are affected by CVE-2025-21873?
CVE-2025-21873 affects various versions of the Linux kernel, specifically those between 6.3 and 6.12.18, as well as specific release candidates.
What type of vulnerability is CVE-2025-21873?
CVE-2025-21873 is a crash vulnerability that can occur in the Linux kernel when certain commands fail.
Can CVE-2025-21873 be exploited remotely?
CVE-2025-21873 does not specify remote exploitation potential, as it primarily leads to a crash rather than unauthorized access.