In the Linux kernel, the following vulnerability has been resolved: acpi: nfit: fix narrowing conversion in acpi_nfit_ctl Syzkaller has reported a warning in to_nfit_bus_uuid(): "only secondary bus…
High CVSS 7.1
Summary
In the Linux kernel, the following vulnerability has been resolved: acpi: nfit: fix narrowing conversion in acpi_nfit_ctl Syzkaller has reported a warning in to_nfit_bus_uuid(): "only secondary bus families can be translated". This warning is emited if the argument is equal to NVDIMM_BUS_FAMILY_NFIT == 0. Function acpi_nfit_ctl() first verifies that a user-provided value call_pkg->nd_family of type u64 is not equal to 0. Then the value is converted to int, and only after that is compared to N…
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/2ff0e408db36c21ed3fa5e3c1e0e687c82cf132f Patch
- https://git.kernel.org/stable/c/4b65cff06a004ac54f6ea8886060f0d07b1ca055 Patch
- https://git.kernel.org/stable/c/73851cfceb00cc77d7a0851bc10f2263394c3e87 Patch
- https://git.kernel.org/stable/c/85f11291658ab907c4294319c8102450cc75bb96 Patch
- https://git.kernel.org/stable/c/92ba06aef65522483784dcbd6697629ddbd4c4f9 Patch
- https://git.kernel.org/stable/c/bae5b55e0f327102e78f6a66fb127275e9bc91b6 Patch
- https://git.kernel.org/stable/c/c90402d2a226ff7afbe1d0650bee8ecc15a91049 Patch
- https://git.kernel.org/stable/c/e71a57c5aaa389d4c3c82f920761262efdd18d38 Patch
- https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html
- https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html
Timeline
- nvd_ingest NVD