EUVD-2023-60341

In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: fslupm: Fix an off-by one test in funexecop 'op-cs' is copied in 'fun-mchipnumber' which is used to access the 'mchipoffsets' and the 'rnbgpio' arrays. These arrays have NANDMAXCHIPS elements, so the index must be...

CVE-2023-54104

CVE-2023-54104 affects the Linux kernel in the mtd:rawnand:fsl_upm driver. The issue is an off-by-one test in fun_exec_op() where data from op-cs is copied into fun->mchip_number, which is used to index mchip_offsets and rnb_gpio arrays (NAND_MAX_CHIPS elements). An out-of-bounds access could ...