CVE-2023-54104

HighCVSS 7.8/10Last modified Aug 4, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op()

'op-cs' is copied in 'fun->mchip_number' which is used to access the 'mchip_offsets' and the 'rnb_gpio' arrays. These arrays have NAND_MAX_CHIPS elements, so the index must be below this limit.

Fix the sanity check in order to avoid the NAND_MAX_CHIPS value. This would lead to out-of-bound accesses.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

VendorProductVersions
LinuxLinux>= 54309d65776755bcdb9dcf3744cd764fc1e254ea, < 1f09d67d390647f83f8f9d26382b0daa43756e6f; >= 54309d65776755bcdb9dcf3744cd764fc1e254ea, < eb7a5e4d14c8659cb97db6863316280e15f67209; >= 54309d65776755bcdb9dcf3744cd764fc1e254ea, < f4b700c71802c81e6f9dce362ee7a0312c8377ba; >= 54309d65776755bcdb9dcf3744cd764fc1e254ea, < 49e57caf967a969f6b955c88805f2d160910aa12; >= 54309d65776755bcdb9dcf3744cd764fc1e254ea, < c6abce60338aa2080973cd95be0aedad528bb41f
LinuxLinux5.9

References

Timeline

Published
Dec 24, 2025
Last modified
Aug 4, 2026
NVD status
Deferred

Related CVEs from 2023

CVE-2023-54105In the Linux kernel, the following vulnerability has been resolved: can: isotp: check CAN address family in isotp_bind() Add missing checkCVE-2023-54106In the Linux kernel, the following vulnerability has been resolved: net/mlx5: fix potential memory leak in mlx5e_init_rep_rx The memory poCVE-2023-541077.8In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: dropping parent refcount after pd_free_fn() is done Some cCVE-2023-54108In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix DMA-API call trace on NVMe LS requests The followinCVE-2023-54109In the Linux kernel, the following vulnerability has been resolved: media: rcar_fdp1: Fix refcount leak in probe and remove function rcar_CVE-2023-54114.3The Funnelforms Free plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the fnsf_aCVE-2023-54110In the Linux kernel, the following vulnerability has been resolved: usb: rndis_host: Secure rndis_query check against int overflow VariablCVE-2023-54111In the Linux kernel, the following vulnerability has been resolved: pinctrl: rockchip: Fix refcount leak in rockchip_pinctrl_parse_groups CVE-2023-54112In the Linux kernel, the following vulnerability has been resolved: kcm: Fix memory leak in error path of kcm_sendmsg() syzbot reported a CVE-2023-54113In the Linux kernel, the following vulnerability has been resolved: rcu: dump vmalloc memory info safely Currently, for double invoke callCVE-2023-54114In the Linux kernel, the following vulnerability has been resolved: net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()CVE-2023-54115In the Linux kernel, the following vulnerability has been resolved: pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_d
CVE-2023-54104: High severity, CVSS 7.8 | Vulnix