CVE-2023-54104
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2023
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op()
In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op() 'op-cs' is copied in 'fun->mchip_number' which is used to access the 'mchip_offsets' and the 'rnb_gpio' arrays. These arrays have NAND_MAX_CHIPS elements, so the index must be below this limit. Fix the sanity check in order to avoid the NAND_MAX_CHIPS value. This would lead to out-of-bound accesses.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 54309d65776755bcdb9dcf3744cd764fc1e254ea | affected | git | 1f09d67d390647f83f8f9d26382b0daa43756e6f | Unavailable | None listed |
| 54309d65776755bcdb9dcf3744cd764fc1e254ea | affected | git | eb7a5e4d14c8659cb97db6863316280e15f67209 | Unavailable | None listed |
| 54309d65776755bcdb9dcf3744cd764fc1e254ea | affected | git | f4b700c71802c81e6f9dce362ee7a0312c8377ba | Unavailable | None listed |
| 54309d65776755bcdb9dcf3744cd764fc1e254ea | affected | git | 49e57caf967a969f6b955c88805f2d160910aa12 | Unavailable | None listed |
| 54309d65776755bcdb9dcf3744cd764fc1e254ea | affected | git | c6abce60338aa2080973cd95be0aedad528bb41f | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 5.9 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 5.9 | Unavailable | None listed |
| 5.10.190 | unaffected | semver | Unavailable | 5.10.* | None listed |
| 5.15.126 | unaffected | semver | Unavailable | 5.15.* | None listed |
| 6.1.45 | unaffected | semver | Unavailable | 6.1.* | None listed |
| 6.4.10 | unaffected | semver | Unavailable | 6.4.* | None listed |
| 6.5 | unaffected | original_commit_for_fix | Unavailable | * | None listed |