CVE-2025-39788 scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple CVEs Affecting SCSI UFS Drivers Published Two new CVEs have been published affecting SCSI UFS drivers. CVE-2024-57872, published on January 11, 2025, involves deallocating HBA during the ufshcd_pltfrm_remove() function. CVE-2025-39788, published on September 11, 2025, addresses programming issues with HCI_UTRL_NEXUS_TYPE in Exynos devices. 6 sources 41