https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 03:31:00 +0000 https://vulnerability.circl.lu/vuln/cve-2025-37887 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>pds_core: handle unsupported PDS_CORE_CMD_FW_CONTROL result</p> <p>If the FW doesn&#39;t support the PDS_CORE_CMD_FW_CONTROL command the driver might at the least print garbage and at the worst crash when the user runs the &#34;devlink dev info&#34; devlink command.</p> <p>This happens because the stack variable fw_list is not 0 initialized which results in fw_list.num_fw_slots being a garbage value from the stack. Then the driver tries to access fw_list.fw_names[i] with i &gt;= ARRAY_SIZE and runs off the end of the array.</p> <p>Fix this by initializing the fw_list and by not failing completely if the devcmd fails because other useful information is printed via devlink dev info even if the devcmd fails.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>pds_core: handle unsupported PDS_CORE_CMD_FW_CONTROL result</p> <p>If the FW doesn&#39;t support the PDS_CORE_CMD_FW_CONTROL command the driver might at the least print garbage and at the worst crash when the user runs the &#34;devlink dev info&#34; devlink command.</p> <p>This happens because the stack variable fw_list is not 0 initialized which results in fw_list.num_fw_slots being a garbage value from the stack. Then the driver tries to access fw_list.fw_names[i] with i &gt;= ARRAY_SIZE and runs off the end of the array.</p> <p>Fix this by initializing the fw_list and by not failing completely if the devcmd fails because other useful information is printed via devlink dev info even if the devcmd fails.</p> https://vulnerability.circl.lu/vuln/cve-2025-37887