CVE-2026-98931
Received
Received - Intake
NULL Pointer Dereference in Linux Kernel MTD SPI-NAND Driver
Vulnerability report for CVE-2026-98931, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-10-23
Last updated on: 2026-10-23
Assigner: kernel.org
Description
Description
In the Linux kernel, the following vulnerability has been resolved:
mtd: spinand: fix NULL pointer dereference with no ECC engine
When "nand-no-ecc-engine" is set in DT, nanddev_get_ecc_engine() takes
the NAND_ECC_ENGINE_TYPE_NONE path and returns success while leaving
nand->ecc.engine NULL. The SPI-NAND code nevertheless dereferences it
unconditionally to test for a pipelined engine, so probing such a
device oopses immediately.
Rather than open-coding the test three times, add a
nand_ecc_is_pipelined() helper to the NAND core that folds the NULL
check into the integration comparison, and use it everywhere. Future
callers then cannot reintroduce the problem.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| Linux | Linux | f9d7c7265bcff7d9a17425a8cddf702e8fe159c2 |
| Linux | Linux | f9d7c7265bcff7d9a17425a8cddf702e8fe159c2 |
| Linux | Linux | f9d7c7265bcff7d9a17425a8cddf702e8fe159c2 |
| Linux | Linux | f9d7c7265bcff7d9a17425a8cddf702e8fe159c2 |
| Linux | Linux | f9d7c7265bcff7d9a17425a8cddf702e8fe159c2 |
| Linux | Linux | 5.18 |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
