CVE-2026-72165

mtd: rawnand: fix condition in 'nand_select_target()'

State: Published
Severity: 7.8 High
Published: Aug 15, 2026
Updated: Oct 16, 2026
Reserved: Aug 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

mtd: rawnand: fix condition in 'nand_select_target()'

'cs' here must be in range [0:nanddev_ntargets[.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	32813e288414fecce18f37f8f0d0414a64b45c56 to before 483a8a8581ee1274ec70e2561492096d4a7305e6Affected 32813e288414fecce18f37f8f0d0414a64b45c56 to before c2a131fb6882c98aada739479cc96df8748d0c24Affected 32813e288414fecce18f37f8f0d0414a64b45c56 to before e6df4fea1dc86c058e1918136c9b9d8e80c4be1bAffected 32813e288414fecce18f37f8f0d0414a64b45c56 to before 3da4eb15c7b421c2d97c402bb7bd607c44822995Affected 32813e288414fecce18f37f8f0d0414a64b45c56 to before fbc7c8a1167b2eb56b2fd8598c29a3d5e9f8676eAffected 32813e288414fecce18f37f8f0d0414a64b45c56 to before 4bbfcf9c7e46cae58257150bf834853559382e28Affected 32813e288414fecce18f37f8f0d0414a64b45c56 to before 8f575fc17360827ca1d1940a84f3c7ee40407a10Affected 32813e288414fecce18f37f8f0d0414a64b45c56 to before 8507c2cc9e4fa402401819f44d1e8a5ef4d11d8bAffected
LinuxLinux	5.2Affected before 5.2Not affected 5.10.261 through 5.10.Not affected 5.15.212 through 5.15.Not affected 6.1.178 through 6.1.Not affected 6.6.145 through 6.6.Not affected 6.12.97 through 6.12.Not affected 6.18.40 through 6.18.Not affected 7.1.5 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

32813e288414fecce18f37f8f0d0414a64b45c56 to before 483a8a8581ee1274ec70e2561492096d4a7305e6Affected
32813e288414fecce18f37f8f0d0414a64b45c56 to before c2a131fb6882c98aada739479cc96df8748d0c24Affected
32813e288414fecce18f37f8f0d0414a64b45c56 to before e6df4fea1dc86c058e1918136c9b9d8e80c4be1bAffected
32813e288414fecce18f37f8f0d0414a64b45c56 to before 3da4eb15c7b421c2d97c402bb7bd607c44822995Affected
32813e288414fecce18f37f8f0d0414a64b45c56 to before fbc7c8a1167b2eb56b2fd8598c29a3d5e9f8676eAffected
32813e288414fecce18f37f8f0d0414a64b45c56 to before 4bbfcf9c7e46cae58257150bf834853559382e28Affected
32813e288414fecce18f37f8f0d0414a64b45c56 to before 8f575fc17360827ca1d1940a84f3c7ee40407a10Affected
32813e288414fecce18f37f8f0d0414a64b45c56 to before 8507c2cc9e4fa402401819f44d1e8a5ef4d11d8bAffected

LinuxLinux

5.2Affected
before 5.2Not affected
5.10.261 through 5.10.*Not affected
5.15.212 through 5.15.*Not affected
6.1.178 through 6.1.*Not affected
6.6.145 through 6.6.*Not affected
6.12.97 through 6.12.*Not affected
6.18.40 through 6.18.*Not affected
7.1.5 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.