The vulnerability of the intel_dg_mtd_probe() function in the driver/mtd/devices/mtd_intel_dg.c file of the MTD memory driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the inteldgmtdprobe function in the driver/mtd/devices/mtdinteldg.c file of the MTD memory driver for the Linux operating system is related to the lack of resource initialization. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

CVE-2026-80597 mtd: maps: vmu-flash: fix NULL pointer dereference in initialization

In the Linux kernel, the following vulnerability has been resolved: mtd: maps: vmu-flash: fix NULL pointer dereference in initialization The mtdinfo contains a struct device, which must be linked to its parent. Without this, the initialization of the MTD fails with a NULL pointer dereference...

PT-2026-82897

In the Linux kernel, the following vulnerability has been resolved: mtd: maps: vmu-flash: fix NULL pointer dereference in initialization The mtd info contains a struct device, which must be linked to its parent. Without this, the initialization of the MTD fails with a NULL pointer dereference...

The vulnerability of the `parse_redboot_partitions()` function in the `drivers/mtd/parsers/redboot.c` file of the MTD memory driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the parseredbootpartitions function in the drivers/mtd/parsers/redboot.c file of the MTD memory driver in the Linux operating system is related to the copying of buffers without checking their size—a classic buffer overflow attack. Exploiting this vulnerability could allow an...

CVE-2026-68467

A flaw was found in the Linux kernel's mtd: mchp23k256 driver. This driver, responsible for managing memory technology devices MTD, incorrectly determined the capabilities of certain SPI Serial Peripheral Interface flash chips. This could lead to the system misinterpreting the memory device's...

CVE-2026-72168

In the Linux kernel, the following vulnerability has been resolved: mtd: maps: vmu-flash: fix fault in unaligned fixup Use kzallocobj / kzallocobjs to allocate the memcard structs, instead of kmallocobj / kmallocobjs to prevent access to uninitialized data. Fixes runtime error: Fault in unaligned...

CVE-2026-68467

In the Linux kernel, the following vulnerability has been resolved: mtd: mchp23k256: use SPI match data for chip caps The driver stores chip capacity information in both the OF match table and the SPI id table. Probe currently uses ofdevicegetmatchdata, so a non-OF SPI modalias match falls back t...

CVE-2026-68467

The CVE-2026-68467 issue affects the Linux kernel mtd: mchp23k256 driver. The driver stored chip capacity in both the OF match table and the SPI id table, and probe used of_device_get_match_data(), which caused an id-table-only match to fallback to mchp23k256_caps. The fix switches to spi_get_dev...

EUVD-2026-59089

In the Linux kernel, the following vulnerability has been resolved: mtd: mchp23k256: use SPI match data for chip caps The driver stores chip capacity information in both the OF match table and the SPI id table. Probe currently uses ofdevicegetmatchdata, so a non-OF SPI modalias match falls back t...

Linux Distros Unpatched Vulnerability : CVE-2026-68467

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mtd: mchp23k256: use SPI match data for chip caps The driver stores chip capacity information in both the OF match table and the SPI id table. Probe currently...

Linux Distros Unpatched Vulnerability : CVE-2026-68423

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mtd: virtconcat: fix use-after-free in mtdvirtconcatdestroy mtdconcatdestroy frees item-conc...

CVE-2026-45896

In the Linux kernel, the following vulnerability has been resolved: mtd: intel-dg: Fix accessing regions before setting nregions The regions array is counted by nregions, but it's set only after accessing it: UBSAN: array-index-out-of-bounds in drivers/mtd/devices/mtdinteldg.c:750:15 index 0 is o...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the mtd intel-dg driver accessing the regions array before setting nregions, potentially leading ...

The vulnerability of the add_mtd_device() function in the drivers/mtd/mtdcore.c file of the MTD memory driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the addmtddevice function in the drivers/mtd/mtdcore.c file of the MTD memory driver in the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the pxa2xx_flash_probe() function in the drivers/mtd/maps/pxa2xx-flash.c module of the Linux kernel’s TMP device access driver allows a hacker to cause a system failure.

The vulnerability of the pxa2xxflashprobe function in the drivers/mtd/maps/pxa2xx-flash.c module of the Linux kernel’s memory device access driver is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a system failure...

PT-2025-40737

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to mtd and lpddr2 nvm, potentially leading to a null pointer dereference. This can occur when the resource size function is called with an inval...

Vulnerability of the dev_attribute_show() function in the drivers/mtd/ubi/build.c module – The MTD memory driver of the Linux operating system’s kernel allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

Vulnerability of the devattributeshow function in the drivers/mtd/ubi/build.c module – The MTD memory driver of the Linux operating system is vulnerable due to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the gpmi_nfc_exec_op() function (drivers/mtd/nand/raw/gpmi-nand/gpmi-nand.c) in the Linux kernel’s MTD driver allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the gpminfcexecop function drivers/mtd/nand/raw/gpmi-nand/gpmi-nand.c in Linux kernel-based drivers is related to incorrect updates of link counters. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

The vulnerability of the Linux operating system’s kernel driver allows a hacker to trigger a service failure.

The vulnerability of the Linux operating system’s MTD driver kernel relates to the assignment of a null pointer in the functions registermtdblktrans and blktransnotifyadd in the drivers/mtd/mtdblkdevs.c module. Exploiting this vulnerability could allow an attacker to trigger a service failure...

AZL-34887 CVE-2024-25739 affecting package kernel for versions less than 6.6.35.1-4

createemptylvol in drivers/mtd/ubi/vtbl.c in the Linux kernel through 6.7.4 can attempt to allocate zero bytes, and crash, because of a missing check for ubi-lebsize...