High 7.8Published Dec 24, 2025

CVE-2023-54104mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op()

Updated under an hour ago (Oct 27, 2026, 11:23 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op() 'op-cs' is copied in 'fun->mchip_number' which is used to access the 'mchip_offsets' and the 'rnb_gpio' arrays. These arrays have NAND_MAX_CHIPS elements, so the index must be below this limit. Fix the sanity check in order to avoid the NAND_MAX_CHIPS value. This would lead to out-of-bound accesses.

CVSS: 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: Aug 5, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	54309d65776755bcdb9dcf3744cd764fc1e254ea builds before 1f09d67d390647f83f8f9d26382b0daa43756e6f; from 54309d65776755bcdb9dcf3744cd764fc1e254ea before eb7a5e4d14c8659cb97db6863316280e15f67209; from 54309d65776755bcdb9dcf3744cd764fc1e254ea before f4b700c71802c81e6f9dce362ee7a0312c8377ba; 54309d65776755bcdb9dcf3744cd764fc1e254ea builds before 49e57caf967a969f6b955c88805f2d160910aa12; from 54309d65776755bcdb9dcf3744cd764fc1e254ea before c6abce60338aa2080973cd95be0aedad528bb41f	CNA record

References

References

https://git.kernel.org/stable/c/1f09d67d390647f83f8f9d26382b0daa43756e6f
https://git.kernel.org/stable/c/eb7a5e4d14c8659cb97db6863316280e15f67209
https://git.kernel.org/stable/c/f4b700c71802c81e6f9dce362ee7a0312c8377ba
https://git.kernel.org/stable/c/49e57caf967a969f6b955c88805f2d160910aa12
https://git.kernel.org/stable/c/c6abce60338aa2080973cd95be0aedad528bb41f

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.