CVE-2025-21656

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> hwmon: (drivetemp) Fix driver producing garbage data when SCSI errors occur<br /> <br /> scsi_execute_cmd() function can return both negative (linux codes) and<br /> positive (scsi_cmnd result field) error codes.<br /> <br /> Currently the driver just passes error codes of scsi_execute_cmd() to<br /> hwmon core, which is incorrect because hwmon only checks for negative<br /> error codes. This leads to hwmon reporting uninitialized data to<br /> userspace in case of SCSI errors (for example if the disk drive was<br /> disconnected).<br /> <br /> This patch checks scsi_execute_cmd() output and returns -EIO if it&amp;#39;s<br /> error code is positive.<br /> <br /> [groeck: Avoid inline variable declaration for portability]