CVE-2026-89954

CVE-2026-89954 affects the Linux kernel 's MTD AFS (Async Flash Storage) v2 parser. The root cause is insufficient bounds validation: the parser uses footer[8] to locate the image information block and the region_count field to walk entries from a fixed local array, but neither value—both taken f...