CVE-2025-37840

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

mtd: rawnand: brcmnand: fix PM resume warning

Fixed warning on PM resume as shown below caused due to uninitialized

struct nand_operation that checks chip select field :

WARN_ON(op->cs >= nanddev_ntargets(&chip->base)

[ 14.588522] ------------[ cut here ]------------

[ 14.588529] WARNING: CPU: 0 PID: 1392 at drivers/mtd/nand/raw/internals.h:139 nand_reset_op+0x1e0/0x1f8

[ 14.588553] Modules linked in: bdc udc_core

[ 14.588579] CPU: 0 UID: 0 PID: 1392 Comm: rtcwake Tainted: G W 6.14.0-rc4-g5394eea10651 #16

[ 14.588590] Tainted: [W]=WARN

[ 14.588593] Hardware name: Broadcom STB (Flattened Device Tree)

[ 14.588598] Call trace:

[ 14.588604] dump_backtrace from show_stack+0x18/0x1c

[ 14.588622] r7:00000009 r6:0000008b r5:60000153 r4:c0fa558c

[ 14.588625] show_stack from dump_stack_lvl+0x70/0x7c

[ 14.588639] dump_stack_lvl from dump_stack+0x18/0x1c

[ 14.588653] r5:c08d40b0 r4:c

Remediation

Check the references section for vendor advisories and patches from linux. Update linux_kernel to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

References