CVE-2025-68316: scsi: ufs: core: Fix invalid probe error return value
In the Linux kernel, the following vulnerability has been resolved:
scsi: ufs: core: Fix invalid probe error return value
After DME Link Startup, the error return value is set to the MIPI UniPro GenericErrorCode which can be 0 (SUCCESS) or 1 (FAILURE). Upon failure during driver probe, the error code 1 is propagated back to the driver probe function which must return a negative value to indicate an error, but 1 is not negative, so the probe is considered to be successful even though it failed. Subsequently, removing the driver results in an oops because it is not in a valid state.
This happens because none of the callers of ufshcdinit() expect a non-negative error code.
Fix the return value and documentation to match actual usage.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-68316?
CVE-2025-68316 has been assigned a severity rating that indicates it impacts the Linux kernel and could lead to potential instability.
How do I fix CVE-2025-68316?
To fix CVE-2025-68316, ensure that your Linux kernel is updated to the latest stable version where the vulnerability has been resolved.
What are the potential impacts of CVE-2025-68316?
CVE-2025-68316 could lead to improper error handling which may affect system stability during the UFS driver operations.
Is CVE-2025-68316 exploited in the wild?
As of the latest information, there have been no reported exploits of CVE-2025-68316 in the wild.
Which versions of the Linux kernel are affected by CVE-2025-68316?
CVE-2025-68316 affects various versions of the Linux kernel prior to the fix, hence it is crucial to update to a patched version.