CVE-2025-68316

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix invalid probe error return value After DME Link Startup, the error return value is set to the MIPI UniPro GenericErrorCode which can be 0 (SUCCESS) or 1 (FAILURE). Upon failure during driver probe, the error code 1 is propagated back to the driver probe function which must return a negative value to indicate an error, but 1 is not negative, so the probe is considered to be successful even though it failed. Subsequently, removing the driver results in an oops because it is not in a valid state. This happens because none of the callers of ufshcd_init() expect a non-negative error code. Fix the return value and documentation to match actual usage.

CVSS

No CVSS.

References

Link	Resource
https://git.kernel.org/stable/c/a2b32bc1d9e359a9f90d0de6af16699facb10935
https://git.kernel.org/stable/c/df96dbe1af7f6591c09f862f1226d3619b07e1b6

Configurations

No configuration.

History

No history.

Information

Published : 2025-12-16 16:16

Updated : 2026-06-17 09:58

NVD link : CVE-2025-68316

Mitre link : CVE-2025-68316

CVE.ORG link : CVE-2025-68316

JSON object : View

Products Affected

No product.

CWE

No CWE.

{"id": "CVE-2025-68316", "cveTags": [], "metrics": {}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "69f5eb78d4b0cc978fe83dd2bfea1b67547290bf", "lessThan": "df96dbe1af7f6591c09f862f1226d3619b07e1b6", "versionType": "git"}, {"status": "affected", "version": "69f5eb78d4b0cc978fe83dd2bfea1b67547290bf", "lessThan": "a2b32bc1d9e359a9f90d0de6af16699facb10935", "versionType": "git"}], "programFiles": ["drivers/ufs/core/ufshcd.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "6.13"}, {"status": "unaffected", "version": "0", "lessThan": "6.13", "versionType": "semver"}, {"status": "unaffected", "version": "6.17.8", "versionType": "semver", "lessThanOrEqual": "6.17.*"}, {"status": "unaffected", "version": "6.18", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/ufs/core/ufshcd.c"], "defaultStatus": "affected"}]}], "published": "2025-12-16T16:16:11.180", "references": [{"url": "https://git.kernel.org/stable/c/a2b32bc1d9e359a9f90d0de6af16699facb10935", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/df96dbe1af7f6591c09f862f1226d3619b07e1b6", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Deferred", "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: ufs: core: Fix invalid probe error return value\n\nAfter DME Link Startup, the error return value is set to the MIPI UniPro\nGenericErrorCode which can be 0 (SUCCESS) or 1 (FAILURE). Upon failure\nduring driver probe, the error code 1 is propagated back to the driver\nprobe function which must return a negative value to indicate an error,\nbut 1 is not negative, so the probe is considered to be successful even\nthough it failed. Subsequently, removing the driver results in an oops\nbecause it is not in a valid state.\n\nThis happens because none of the callers of ufshcd_init() expect a\nnon-negative error code.\n\nFix the return value and documentation to match actual usage."}], "lastModified": "2026-06-17T09:58:55.410", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}