Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-45896

mtd: intel-dg: Fix accessing regions before setting nregions

Description

In the Linux kernel, the following vulnerability has been resolved: mtd: intel-dg: Fix accessing regions before setting nregions The regions array is counted by nregions, but it's set only after accessing it: [] UBSAN: array-index-out-of-bounds in drivers/mtd/devices/mtd_intel_dg.c:750:15 [] index 0 is out of range for type '<unknown> [*]' Fix it by also fixing an undesired behavior: the loop silently ignores ENOMEM and continues setting the other entries.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • ceb5ab3cb64637952657be23d347e1c79dd02212 to < 721bd22bcf45a63ebd9bd0f478ef721b45cc5383affected
  • ceb5ab3cb64637952657be23d347e1c79dd02212 to < d58fca8513414b15387460b14a7a0a30405b9c9eaffected
  • ceb5ab3cb64637952657be23d347e1c79dd02212 to < 779c59274d03cc5c07237a2c845dfb71cff77705affected

Linux Linux

Default version status: affected

  • 6.17affected
  • 0 to < 6.17unaffected
  • 6.18.14 to ≤ 6.18.*unaffected
  • 6.19.4 to ≤ 6.19.*unaffected
  • 7.0 to ≤ *unaffected

References