Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-98931

mtd: spinand: fix NULL pointer dereference with no ECC engine

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: mtd: spinand: fix NULL pointer dereference with no ECC engine When "nand-no-ecc-engine" is set in DT, nanddev_get_ecc_engine() takes the NAND_ECC_ENGINE_TYPE_NONE path and returns success while leaving nand->ecc.engine NULL. The SPI-NAND code nevertheless dereferences it unconditionally to test for a pipelined engine, so probing such a device oopses immediately. Rather than open-coding the test three times, add a nand_ecc_is_pipelined() helper to the NAND core that folds the NULL check into the integration comparison, and use it everywhere. Future callers then cannot reintroduce the problem.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • f9d7c7265bcff7d9a17425a8cddf702e8fe159c2 to < ab781c7840bb8a210156e25eb0c027d6097fb74daffected
  • f9d7c7265bcff7d9a17425a8cddf702e8fe159c2 to < 77c449c9c946fc420008dc55cd30f53749c915e4affected
  • f9d7c7265bcff7d9a17425a8cddf702e8fe159c2 to < 3c765fd5212c1bbc71568b1518a7ec963a7040b4affected
  • f9d7c7265bcff7d9a17425a8cddf702e8fe159c2 to < 80e8b0ea73ba295e92dfb6cf1c41df9da64234c6affected
  • f9d7c7265bcff7d9a17425a8cddf702e8fe159c2 to < fc2f651f520394893b14b75281a01e502bfa73bbaffected
  • f9d7c7265bcff7d9a17425a8cddf702e8fe159c2 to < b890e6163761ddb580cc74f43e15f8bbde15647eaffected

Linux Linux

Default version status: affected

  • 5.18affected
  • 0 to < 5.18unaffected
  • 6.1.191 to ≤ 6.1.*unaffected
  • 6.6.160 to ≤ 6.6.*unaffected
  • 6.12.113 to ≤ 6.12.*unaffected
  • 6.18.56 to ≤ 6.18.*unaffected
  • 7.2.10 to ≤ 7.2.*unaffected
  • 7.3 to ≤ *unaffected

References