Bug 2365286 (CVE-2025-37866) - CVE-2025-37866 kernel: mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show()
Summary: CVE-2025-37866 kernel: mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse...
Keywords:
Status: NEW
Alias: CVE-2025-37866
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2025-05-09 07:03 UTC by OSIDB Bzimport
Modified: 2025-05-09 07:52 UTC (History)
4 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2025-05-09 07:03:21 UTC 
In the Linux kernel, the following vulnerability has been resolved:

mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show()

A warning is seen when running the latest kernel on a BlueField SOC:
[251.512704] ------------[ cut here ]------------
[251.512711] invalid sysfs_emit: buf:0000000003aa32ae
[251.512720] WARNING: CPU: 1 PID: 705264 at fs/sysfs/file.c:767 sysfs_emit+0xac/0xc8

The warning is triggered because the mlxbf-bootctl driver invokes
"sysfs_emit()" with a buffer pointer that is not aligned to the
start of the page. The driver should instead use "sysfs_emit_at()"
to support non-zero offsets into the destination buffer.
Comment 1 Michal Findra 2025-05-09 07:47:49 UTC 
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025050957-CVE-2025-37866-47d2@gregkh/T
Note You need to log in before you can comment on or make changes to this bug.