47 matches found
Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1
In the Linux kernel, the following vulnerability has been resolved: mtd: Fixed a NULL pointer dereferencing issue caused by the ftl notifier. If both ftl.ko and gluebi.ko are loaded, the ftl notifier triggers a NULL pointer dereferencing when attempting to access ‘gluebi-desc’ in gluebiread. In t...
CVE-2026-68424
In the Linux kernel, the following vulnerability has been resolved: mtd: virtconcat: fix use-after-free in mtdvirtconcatdestroyjoins mtdconcatdestroy frees item-concat so calling mtdvirtconcatputmtddevicesitem-concat leads to a use after free. Fix this by moving mtdvirtconcatputmtddevices before...
CVE-2026-68423
In the Linux kernel, the following vulnerability has been resolved: mtd: virtconcat: fix use-after-free in mtdvirtconcatdestroy mtdconcatdestroy frees item-concat so calling mtdvirtconcatputmtddevicesitem-concat after that leads to a use-after-free. Fix it by moving mtdvirtconcatputmtddevices...
CVE-2026-68416
In the Linux kernel, the following vulnerability has been resolved: mtd: fix double free and WARNON in addmtddevice error paths When deviceregister or mtdnvmemadd fails inside addmtddevice for a partition, the error handling triggers mtdrelease via putdevice or deviceunregister. mtdrelease calls...
CVE-2026-68424
CVE-2026-68424 affects the Linux kernel MTD virt_concat code. The root cause is a use-after-free: mtd_concat_destroy() frees item->concat, so calling mtd_virt_concat_put_mtd_devices(item->concat) can use freed memory. The fix migrates the call to mtd_virt_concat_put_mtd_devices() to occur b...
mtd: spi-nor: debugfs: fix out-of-bounds read in spi_nor_params_show()
...
CVE-2026-46190
A flaw was found in the Linux kernel's Memory Technology Device MTD SPI-NOR debugfs component. An out-of-bounds read vulnerability exists in the spinorparamsshow function due to an incorrect calculation of an array's size. This error allows a local attacker to read memory outside of the intended...
UBUNTU-CVE-2026-45896
In the Linux kernel, the following vulnerability has been resolved: mtd: intel-dg: Fix accessing regions before setting nregions The regions array is counted by nregions, but it's set only after accessing it: UBSAN: array-index-out-of-bounds in drivers/mtd/devices/mtdinteldg.c:750:15 index 0 is o...
CVE-2026-45896 mtd: intel-dg: Fix accessing regions before setting nregions
In the Linux kernel, the following vulnerability has been resolved: mtd: intel-dg: Fix accessing regions before setting nregions The regions array is counted by nregions, but it's set only after accessing it: UBSAN: array-index-out-of-bounds in drivers/mtd/devices/mtdinteldg.c:750:15 index 0 is o...
PT-2026-43763
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An array-index-out-of-bounds issue exists in the mtd intel dg.c file. The regions array is accessed before the nregions variable is set, which determines the array count. Additionally, t...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011155)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011155 advisory. In the Linux kernel, the following vulnerability has been resolved: mtd: spi-nor: Fix shift-out-of-bounds in spinorseterasetype spinorseterasetype was used either to...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011017)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011017 advisory. In the Linux kernel, the following vulnerability has been resolved: mtd: Fix device name leak when register device failed in addmtddevice There is a kmemleak when...
SUSE CVE-2026-23474
In the Linux kernel, the following vulnerability has been resolved: mtd: Avoid boot crash in RedBoot partition table parser Given CONFIGFORTIFYSOURCE=y and a recent compiler, commit 439a1bcac648 "fortify: Use builtindynamicobjectsize when available" produces the warning below and an oops. Searchi...
CVE-2026-23474
A flaw was found in the Linux kernel's Memory Technology Device mtd subsystem, specifically within the RedBoot partition table parser. A local user could trigger a buffer overflow when the system attempts to read beyond the allocated buffer size during partition table parsing. This vulnerability...
ROS-20260306-73-0004
A vulnerability in the mtd component of the Linux operating system kernel is related to improper resource initialization. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
PT-2026-30168
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.19.0 Description The Linux kernel contains a flaw in the RedBoot partition table parser. When CONFIG FORTIFY SOURCE is enabled and a recent compiler is used, a buffer overflow can occur during the parsing...
CVE-2023-54295 mtd: spi-nor: Fix shift-out-of-bounds in spi_nor_set_erase_type
In the Linux kernel, the following vulnerability has been resolved: mtd: spi-nor: Fix shift-out-of-bounds in spinorseterasetype spinorseterasetype was used either to set or to mask out an erase type. When we used it to mask out an erase type a shift-out-of-bounds was hit: UBSAN: shift-out-of-boun...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a mtdchar read/write ioctl integer overflow, which could result in a buffer overflow...
EUVD-2023-60067
In the Linux kernel, the following vulnerability has been resolved: USB: usbtmc: Fix direction for 0-length ioctl control messages The syzbot fuzzer found a problem in the usbtmc driver: When a user submits an ioctl for a 0-length control transfer, the driver does not check that the direction is...