CVE-2026-80597

In the Linux kernel, the following vulnerability has been resolved: mtd: maps: vmu-flash: fix NULL pointer dereference in initialization The mtdinfo contains a struct device, which must be linked to its parent. Without this, the initialization of the MTD fails with a NULL pointer dereference...

EUVD-2026-67473

In the Linux kernel, the following vulnerability has been resolved: mtd: maps: vmu-flash: fix NULL pointer dereference in initialization The mtdinfo contains a struct device, which must be linked to its parent. Without this, the initialization of the MTD fails with a NULL pointer dereference...

CVE-2026-80597 mtd: maps: vmu-flash: fix NULL pointer dereference in initialization

In the Linux kernel, the following vulnerability has been resolved: mtd: maps: vmu-flash: fix NULL pointer dereference in initialization The mtdinfo contains a struct device, which must be linked to its parent. Without this, the initialization of the MTD fails with a NULL pointer dereference...

CVE-2026-80597 mtd: maps: vmu-flash: fix NULL pointer dereference in initialization

In the Linux kernel, the following vulnerability has been resolved: mtd: maps: vmu-flash: fix NULL pointer dereference in initialization The mtdinfo contains a struct device, which must be linked to its parent. Without this, the initialization of the MTD fails with a NULL pointer dereference...

CVE-2026-80597

In the Linux kernel, the following vulnerability has been resolved: mtd: maps: vmu-flash: fix NULL pointer dereference in initialization The mtdinfo contains a struct device, which must be linked to its parent. Without this, the initialization of the MTD fails with a NULL pointer dereference...

CVE-2026-80597

CVE-2026-80597 affects the Linux kernel 's mtd: maps: vmu-flash driver. During MTD initialization, the mtd_info structure's embedded struct device was not linked to its parent, causing a NULL pointer dereference that failed the MTD initialization process. The fix ensures the device is properly li...

PT-2026-82897

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs during the initialization of the vmu-flash MTD maps. This happens because the mtd info contains a struct device that must be linked to its parent; failu...

SUSE CVE-2026-68467

In the Linux kernel, the following vulnerability has been resolved: mtd: mchp23k256: use SPI match data for chip caps The driver stores chip capacity information in both the OF match table and the SPI id table. Probe currently uses ofdevicegetmatchdata, so a non-OF SPI modalias match falls back t...

SUSE CVE-2026-68468

In the Linux kernel, the following vulnerability has been resolved: mtd: virt-concat: free duplicate generated name Every MTD registration runs mtdvirtconcatcreatejoin. Once a virtual concat has already been registered, the function builds the same name again and takes the equal-name branch. That...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104545)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104545 advisory. In the Linux kernel, the following vulnerability has been resolved: mtd: slram: remove failed entries from the device list registerdevice links a new slrammtdlist...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104570)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104570 advisory. In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: fix condition in 'nandselecttarget' 'cs' here must be in range 0:nanddevntargets...

MTD memory driver Heap Buffer Overflow DoS

The vulnerability of the parseredbootpartitions function in the drivers/mtd/parsers/redboot.c file of the MTD memory driver in the Linux operating system is related to the copying of buffers without checking their size—a classic buffer overflow attack. Exploiting this vulnerability could allow an...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: mtd:virt-concat: free duplicate generated name Every MTD registration runs mtdvirtconcatcreatejoin. Once a virtual concat has been registered, the function generates the same name again and proceeds to the equal-name branch. This...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: pl353: Fix for probe resource allocation. During the probe function, the devmioremap function is called with the parent device instead of the current one. As a result, when the module is unloaded, the register area...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: gpmi: do not leak PM reference in the error path. If gpminfcapplytimings fails, the PM runtime usage counter must be dropped...

CVE-2026-72165

A flaw was found in the mtd: rawnand component of the Linux kernel. The nandselecttarget function contains an incorrect condition check for the 'cs' chip select parameter, allowing it to go out of its intended range. This out-of-bounds access could potentially lead to a system crash, resulting in...

Linux Distros Unpatched Vulnerability : CVE-2026-68468

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mtd: virt-concat: free duplicate generated name Every MTD registration runs...

CVE-2026-72171

A flaw was found in the Linux kernel's Memory Technology Device MTD subsystem, specifically within the slram module. When registerdevice fails during the allocation of a new slrammtdlist entry, a partially initialized entry can remain on the global device list. A subsequent cleanup operation may...

Linux Distros Unpatched Vulnerability : CVE-2026-72171

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mtd: slram: remove failed entries from the device list registerdevice links a new slrammtdlist entry before allocating all of the state needed by the entry. If ...

Linux Distros Unpatched Vulnerability : CVE-2026-68466

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mtd: rawnand: lpc32xxslc: fail DMA transfer on completion timeout lpc32xxxmitdma waits for the DMA completion callback but ignores waitforcompletiontimeout. A...