Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: mtd: mchp23k256: use SPI match data for chip caps The driver stores chip capacity information in both the OF match table and the SPI id table. Probe currently uses ofdevicegetmatchdata, so a non-OF SPI modalias match falls back t...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: mtd: afs: validate v2 image info bounds The AFS v2 parser uses footer8 to locate the image information block within the current erase block, then utilizes image information regioncount to iterate through entries stored in a fixed...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: mtd: spi-nor: swp: Improve locking user experience When the first block is locked or the first few blocks, if the user wants to fully unlock the device, there are two possible outcomes: - Either they request to unlock the entire...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: pl353: fix probe resource allocation During probe, devmioremap is called with the parent device instead of the current one. As a result, when the module is unloaded, the register area is not released. Target the pl3...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: fix condition in ‘nandselecttarget’ ‘cs’ here must be in range 0:nanddevntargets...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: mtd: maps: vmu-flash: fix NULL pointer dereference in initialization The mtdinfo contains a struct device, which must be linked to its parent. Without this, the initialization of the MTD fails with a NULL pointer dereference...

CVE-2026-89952

A flaw was found in the Linux kernel's mtd: rawnand component. The nandflashdetectextparampage function fails to validate if the fixed page and subsequent variable-length sections of an ONFI Open NAND Flash Interface extended parameter page fit within the allocated memory. This improper validatio...

CVE-2026-98931

A flaw was found in the Linux kernel's Memory Technology Device MTD SPI-NAND driver. When probing a flash memory device configured without an Error Correction Code ECC engine, the driver attempts to access an uninitialized pointer. A local user could exploit this flaw to crash the system, resulti...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146299)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146299 advisory. In the Linux kernel, the following vulnerability has been resolved: mtd: mchp23k256: use SPI match data for chip caps The driver stores chip capacity information in...

SUSE CVE-2026-98931

In the Linux kernel, the following vulnerability has been resolved: mtd: spinand: fix NULL pointer dereference with no ECC engine When "nand-no-ecc-engine" is set in DT, nanddevgeteccengine takes the NANDECCENGINETYPENONE path and returns success while leaving nand-ecc.engine NULL. The SPI-NAND...

CVE-2026-98834

A flaw was found in the Linux kernel's Memory Technology Device MTD subsystem. An attacker capable of triggering device registration failures can cause a Denial of Service DoS via a kernel crash. During the setup of One-Time Programmable OTP non-volatile memory devices, an initialization failure...

CVE-2026-98833

A flaw was found in the Linux kernel's Memory Technology Device MTD subsystem. When accessing certain partitions, the kernel improperly passes a partition device reference instead of the master device structure to the driver callback. A local user could exploit this flaw during device access...

DEBIAN-CVE-2026-98931

In the Linux kernel, the following vulnerability has been resolved: mtd: spinand: fix NULL pointer dereference with no ECC engine When "nand-no-ecc-engine" is set in DT, nanddevgeteccengine takes the NANDECCENGINETYPENONE path and returns success while leaving nand-ecc.engine NULL. The SPI-NAND...

AZL-110714 CVE-2026-98931 affecting package kernel 6.6.159.1-1

In the Linux kernel, the following vulnerability has been resolved: mtd: spinand: fix NULL pointer dereference with no ECC engine When "nand-no-ecc-engine" is set in DT, nanddevgeteccengine takes the NANDECCENGINETYPENONE path and returns success while leaving nand-ecc.engine NULL. The SPI-NAND...

CVE-2026-98931

In the Linux kernel, the following vulnerability has been resolved: mtd: spinand: fix NULL pointer dereference with no ECC engine When "nand-no-ecc-engine" is set in DT, nanddevgeteccengine takes the NANDECCENGINETYPENONE path and returns success while leaving nand-ecc.engine NULL. The SPI-NAND...

CVE-2026-98931

In the Linux kernel, the following vulnerability has been resolved: mtd: spinand: fix NULL pointer dereference with no ECC engine When "nand-no-ecc-engine" is set in DT, nanddevgeteccengine takes the NANDECCENGINETYPENONE path and returns success while leaving nand-ecc.engine NULL. The SPI-NAND...

UBUNTU-CVE-2026-98931

In the Linux kernel, the following vulnerability has been resolved: mtd: spinand: fix NULL pointer dereference with no ECC engine When "nand-no-ecc-engine" is set in DT, nanddevgeteccengine takes the NANDECCENGINETYPENONE path and returns success while leaving nand-ecc.engine NULL. The SPI-NAND...

CVE-2026-98931

The Linux kernel contains a vulnerability in the mtd: spinand component where a NULL pointer dereference occurs when the "nand-no-ecc-engine" property is set in the Device Tree. Specifically, nanddev_get_ecc_engine() returns success while leaving nand->ecc.engine as NULL, but the SPI-NAND code...

EUVD-2026-108903

In the Linux kernel, the following vulnerability has been resolved: mtd: spinand: fix NULL pointer dereference with no ECC engine When "nand-no-ecc-engine" is set in DT, nanddevgeteccengine takes the NANDECCENGINETYPENONE path and returns success while leaving nand-ecc.engine NULL. The SPI-NAND...

CVE-2026-98931 mtd: spinand: fix NULL pointer dereference with no ECC engine

In the Linux kernel, the following vulnerability has been resolved: mtd: spinand: fix NULL pointer dereference with no ECC engine When "nand-no-ecc-engine" is set in DT, nanddevgeteccengine takes the NANDECCENGINETYPENONE path and returns success while leaving nand-ecc.engine NULL. The SPI-NAND...