mtd: nand: ecc-mxic: Fix use of uninitialized variable ret — CVE-2025-38277

Summary

Advisory CVE-2025-38277. mtd: nand: ecc-mxic: Fix use of uninitialized variable ret Vendor: Microsoft. Source: MSRC. Threat: high. CVSS 7.1. See the official advisory for details.

What to do

General, cautious steps (verify details in the official source):

• Prioritize patching or mitigation immediately (treat as actively risky).
• Identify affected product versions in your inventory and verify whether you are impacted.
• Apply vendor patches/updates or recommended mitigations as soon as available.
• Read the official advisory for exact affected versions and remediation steps.

Official advisory

Read the official source

Related advisories

• <vuln:Note Title="FAQ" Type="FAQ" Ordinal="10">&lt;p&gt;&lt;strong&gt;Is Azure Linux the only Microsoft product that inc CVE-2025-24294
• A possible assertion failure when 'stale-answer-client-timeout' is set to '0' CVE-2025-40777
• ACPICA: Refuse to evaluate a method if arguments are missing CVE-2025-38386
• af_unix: Don't leave consecutive consumed OOB skbs. CVE-2025-38236
• ALSA: usb-audio: Kill timer properly at removal CVE-2025-38105
• Apache HTTP Server: HTTP response splitting CVE-2024-42516
• Apache HTTP Server: HTTP/2 DoS by Memory Increase CVE-2025-53020
• Apache HTTP Server: mod_proxy_http2 denial of service CVE-2025-49630
• Apache HTTP Server: mod_ssl error log variable escaping CVE-2024-47252
• Apache HTTP Server: mod_ssl TLS upgrade attack CVE-2025-49812
• Apache HTTP Server: SSRF with mod_headers setting Content-Type header CVE-2024-43204
• arm64/fpsimd: Discard stale CPU state when handling SME traps CVE-2025-38170