CVE-2023-54104
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
24/12/2025
Last modified:
24/12/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op()<br />
<br />
&#39;op-cs&#39; is copied in &#39;fun->mchip_number&#39; which is used to access the<br />
&#39;mchip_offsets&#39; and the &#39;rnb_gpio&#39; arrays.<br />
These arrays have NAND_MAX_CHIPS elements, so the index must be below this<br />
limit.<br />
<br />
Fix the sanity check in order to avoid the NAND_MAX_CHIPS value. This<br />
would lead to out-of-bound accesses.
Impact
References to Advisories, Solutions, and Tools
- https://git.kernel.org/stable/c/1f09d67d390647f83f8f9d26382b0daa43756e6f
- https://git.kernel.org/stable/c/49e57caf967a969f6b955c88805f2d160910aa12
- https://git.kernel.org/stable/c/c6abce60338aa2080973cd95be0aedad528bb41f
- https://git.kernel.org/stable/c/eb7a5e4d14c8659cb97db6863316280e15f67209
- https://git.kernel.org/stable/c/f4b700c71802c81e6f9dce362ee7a0312c8377ba



