CVE-2023-54104
Off-by-One Vulnerability in Linux Kernel MTD RawNAND Component
Publication date: 2025-12-24
Last updated on: 2025-12-24
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | * |
| linux | kernel | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is an off-by-one error in the Linux kernel's mtd: rawnand: fsl_upm component. Specifically, a value 'op-cs' is copied into 'fun->mchip_number', which is then used as an index to access the 'mchip_offsets' and 'rnb_gpio' arrays. These arrays have a fixed size defined by NAND_MAX_CHIPS, and the code did not properly check that the index was below this limit. This off-by-one error could lead to out-of-bound array accesses.
How can this vulnerability impact me? :
The off-by-one error leading to out-of-bound array accesses can cause undefined behavior in the kernel, such as memory corruption, crashes, or potentially allow an attacker to execute arbitrary code or escalate privileges. This can compromise system stability and security.