Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2025-21656

hwmon: (drivetemp) Fix driver producing garbage data when SCSI errors occur

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: hwmon: (drivetemp) Fix driver producing garbage data when SCSI errors occur scsi_execute_cmd() function can return both negative (linux codes) and positive (scsi_cmnd result field) error codes. Currently the driver just passes error codes of scsi_execute_cmd() to hwmon core, which is incorrect because hwmon only checks for negative error codes. This leads to hwmon reporting uninitialized data to userspace in case of SCSI errors (for example if the disk drive was disconnected). This patch checks scsi_execute_cmd() output and returns -EIO if it's error code is positive. [groeck: Avoid inline variable declaration for portability]

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 5b46903d8bf372e563bf2150d46b87fff197a109 to < babdf2a11329d30dc5086eb7a938a360aa490282affected
  • 5b46903d8bf372e563bf2150d46b87fff197a109 to < 0435d35f9d511fa5ddba49c9f68f947e395c93f9affected
  • 5b46903d8bf372e563bf2150d46b87fff197a109 to < f9723fd2770ef5563ff1685f72bcc1c411219c29affected
  • 5b46903d8bf372e563bf2150d46b87fff197a109 to < 53e25b10a28edaf8c2a1d3916fd8929501a50dfcaffected
  • 5b46903d8bf372e563bf2150d46b87fff197a109 to < 42268d885e44af875a6474f7bba519cc6cea6a9daffected
  • 5b46903d8bf372e563bf2150d46b87fff197a109 to < 82163d63ae7a4c36142cd252388737205bb7e4b9affected

Linux Linux

Default version status: affected

  • 5.6affected
  • 0 to < 5.6unaffected
  • 5.10.273 to ≤ 5.10.*unaffected
  • 5.15.224 to ≤ 5.15.*unaffected
  • 6.1.191 to ≤ 6.1.*unaffected
  • 6.6.72 to ≤ 6.6.*unaffected
  • 6.12.10 to ≤ 6.12.*unaffected
  • 6.13 to ≤ *unaffected

References