Riskcovery

CVE-2026-98931

mtd: spinand: fix NULL pointer dereference with no ECC engine

State
Published
Severity
Not scored
Published
Oct 23, 2026
Updated
Oct 30, 2026
Reserved
Sep 25, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

mtd: spinand: fix NULL pointer dereference with no ECC engine

When "nand-no-ecc-engine" is set in DT, nanddev_get_ecc_engine() takes the NAND_ECC_ENGINE_TYPE_NONE path and returns success while leaving nand->ecc.engine NULL. The SPI-NAND code nevertheless dereferences it unconditionally to test for a pipelined engine, so probing such a device oopses immediately.

Rather than open-coding the test three times, add a nand_ecc_is_pipelined() helper to the NAND core that folds the NULL check into the integration comparison, and use it everywhere. Future callers then cannot reintroduce the problem.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • f9d7c7265bcff7d9a17425a8cddf702e8fe159c2 to before ab781c7840bb8a210156e25eb0c027d6097fb74dAffected
  • f9d7c7265bcff7d9a17425a8cddf702e8fe159c2 to before 77c449c9c946fc420008dc55cd30f53749c915e4Affected
  • f9d7c7265bcff7d9a17425a8cddf702e8fe159c2 to before 3c765fd5212c1bbc71568b1518a7ec963a7040b4Affected
  • f9d7c7265bcff7d9a17425a8cddf702e8fe159c2 to before 80e8b0ea73ba295e92dfb6cf1c41df9da64234c6Affected
  • f9d7c7265bcff7d9a17425a8cddf702e8fe159c2 to before fc2f651f520394893b14b75281a01e502bfa73bbAffected
  • f9d7c7265bcff7d9a17425a8cddf702e8fe159c2 to before b890e6163761ddb580cc74f43e15f8bbde15647eAffected
LinuxLinux
  • 5.18Affected
  • before 5.18Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.160 through 6.6.*Not affected
  • 6.12.113 through 6.12.*Not affected
  • 6.18.56 through 6.18.*Not affected
  • 7.2.10 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.