https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 18:46:48 +0000 https://vulnerability.circl.lu/vuln/cve-2025-22044 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>acpi: nfit: fix narrowing conversion in acpi_nfit_ctl</p> <p>Syzkaller has reported a warning in to_nfit_bus_uuid(): &#34;only secondary bus families can be translated&#34;. This warning is emited if the argument is equal to NVDIMM_BUS_FAMILY_NFIT == 0. Function acpi_nfit_ctl() first verifies that a user-provided value call_pkg-&gt;nd_family of type u64 is not equal to 0. Then the value is converted to int, and only after that is compared to NVDIMM_BUS_FAMILY_MAX. This can lead to passing an invalid argument to acpi_nfit_ctl(), if call_pkg-&gt;nd_family is non-zero, while the lower 32 bits are zero.</p> <p>Furthermore, it is best to return EINVAL immediately upon seeing the invalid user input. The WARNING is insufficient to prevent further undefined behavior based on other invalid user input.</p> <p>All checks of the input value should be applied to the original variable call_pkg-&gt;nd_family.</p> <p>[iweiny: update commit message]</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>acpi: nfit: fix narrowing conversion in acpi_nfit_ctl</p> <p>Syzkaller has reported a warning in to_nfit_bus_uuid(): &#34;only secondary bus families can be translated&#34;. This warning is emited if the argument is equal to NVDIMM_BUS_FAMILY_NFIT == 0. Function acpi_nfit_ctl() first verifies that a user-provided value call_pkg-&gt;nd_family of type u64 is not equal to 0. Then the value is converted to int, and only after that is compared to NVDIMM_BUS_FAMILY_MAX. This can lead to passing an invalid argument to acpi_nfit_ctl(), if call_pkg-&gt;nd_family is non-zero, while the lower 32 bits are zero.</p> <p>Furthermore, it is best to return EINVAL immediately upon seeing the invalid user input. The WARNING is insufficient to prevent further undefined behavior based on other invalid user input.</p> <p>All checks of the input value should be applied to the original variable call_pkg-&gt;nd_family.</p> <p>[iweiny: update commit message]</p> https://vulnerability.circl.lu/vuln/cve-2025-22044