DEBIAN-CVE-2025-21873

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: bsg: Fix crash when arpmb command fails If the device doesn't support arpmb we'll crash due to copying user data in bsgtransportsgiofn. In the case where ufsbsgexecadvancedrpmbreq returns an error, do not set the...

CVE-2025-21873

CVE-2025-21873 affects the Linux kernel SCSI/UFS stack, specifically the bsg path. The issue occurs when an ARPMB (arpmb) command fails on devices that do not support ARPMB, leading to a crash due to copying user data in bsg_transport_sg_io_fn(). When ufs_bsg_exec_advanced_rpmb_req() returns an e...