Out-of-Bounds Exception in Linux Kernel Affecting imx8mp_blk_ctrl Module

CVE-2025-21668

Summary

A vulnerability exists in the imx8mp_blk_ctrl component of the Linux kernel, where a missing loop break condition in the imx8mp_blk_ctrl_remove() function can lead to an out-of-bounds exception. This flaw may cause the system to behave unexpectedly, potentially compromising the stability and security of the affected device. The issue arises when the removal process does not exit correctly, which could be exploited in a scenario where device shutdown is improperly managed. Users are encouraged to update to patched versions of the kernel to mitigate any risks associated with this defect.

References