CVE-2025-68316 scsi: ufs: core: Fix invalid probe error return value
A logic error in the Linux kernel UFS driver causes a system crash when removing a failed driver, leading to denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-68316?
CVE-2025-68316 is a denial of service vulnerability in Linux, published on 16 Dec 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
scsi: ufs: core: Fix invalid probe error return value
After DME Link Startup, the error return value is set to the MIPI UniPro GenericErrorCode which can be 0 (SUCCESS) or 1 (FAILURE). Upon failure during driver probe, the error code 1 is propagated back to the driver probe function which must return a negative value to indicate an error, but 1 is not negative, so the probe is considered to be successful even though it failed. Subsequently, removing the driver results in an oops because it is not in a valid state.
This happens because none of the callers of ufshcd_init() expect a non-negative error code.
Fix the return value and documentation to match actual usage.
Which versions are affected by CVE-2025-68316?
How do I fix CVE-2025-68316?
Apply the vendor's patch.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2025-68316 being exploited?
There is no known exploitation of CVE-2025-68316 in the wild and no public exploit code.
Sources
Also known as BELL-CVE-2025-68316, DEBIAN-CVE-2025-68316, GHSA-9gpm-c6g2-wrgf, UBUNTU-CVE-2025-68316.