Riskcovery

CVE-2026-45896

mtd: intel-dg: Fix accessing regions before setting nregions

State
Published
Severity
Not scored
Published
May 27, 2026
Updated
May 27, 2026
Reserved
May 13, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

mtd: intel-dg: Fix accessing regions before setting nregions

The regions array is counted by nregions, but it's set only after accessing it:

[] UBSAN: array-index-out-of-bounds in drivers/mtd/devices/mtd_intel_dg.c:750:15 [] index 0 is out of range for type '<unknown> [*]'

Fix it by also fixing an undesired behavior: the loop silently ignores ENOMEM and continues setting the other entries.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • ceb5ab3cb64637952657be23d347e1c79dd02212 to before 721bd22bcf45a63ebd9bd0f478ef721b45cc5383Affected
  • ceb5ab3cb64637952657be23d347e1c79dd02212 to before d58fca8513414b15387460b14a7a0a30405b9c9eAffected
  • ceb5ab3cb64637952657be23d347e1c79dd02212 to before 779c59274d03cc5c07237a2c845dfb71cff77705Affected
LinuxLinux
  • 6.17Affected
  • before 6.17Not affected
  • 6.18.14 through 6.18.*Not affected
  • 6.19.4 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.