CVE-2023-54104
mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op()
CVSS Score
7.8
EPSS Score
0.0%
EPSS Percentile
0th
In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op() 'op-cs' is copied in 'fun->mchip_number' which is used to access the 'mchip_offsets' and the 'rnb_gpio' arrays. These arrays have NAND_MAX_CHIPS elements, so the index must be below this limit. Fix the sanity check in order to avoid the NAND_MAX_CHIPS value. This would lead to out-of-bound accesses.
| Vendor | linux |
| Product | linux |
| Ecosystems | |
| Industries | Technology |
| Published | Dec 24, 2025 |
| Last Updated | Aug 5, 2026 |
Stay Ahead of the Next One
Get instant alerts for linux linux
Be the first to know when new high vulnerabilities affecting linux linux are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
Linux / Linux
54309d65776755bcdb9dcf3744cd764fc1e254ea < 1f09d67d390647f83f8f9d26382b0daa43756e6f 54309d65776755bcdb9dcf3744cd764fc1e254ea < eb7a5e4d14c8659cb97db6863316280e15f67209 54309d65776755bcdb9dcf3744cd764fc1e254ea < f4b700c71802c81e6f9dce362ee7a0312c8377ba 54309d65776755bcdb9dcf3744cd764fc1e254ea < 49e57caf967a969f6b955c88805f2d160910aa12 54309d65776755bcdb9dcf3744cd764fc1e254ea < c6abce60338aa2080973cd95be0aedad528bb41f
Linux / Linux
5.9
References
git.kernel.org: https://git.kernel.org/stable/c/1f09d67d390647f83f8f9d26382b0daa43756e6f git.kernel.org: https://git.kernel.org/stable/c/eb7a5e4d14c8659cb97db6863316280e15f67209 git.kernel.org: https://git.kernel.org/stable/c/f4b700c71802c81e6f9dce362ee7a0312c8377ba git.kernel.org: https://git.kernel.org/stable/c/49e57caf967a969f6b955c88805f2d160910aa12 git.kernel.org: https://git.kernel.org/stable/c/c6abce60338aa2080973cd95be0aedad528bb41f