Memory Corruption in Linux Kernel MTD Subsystem

Executive Summary

This vulnerability in the Linux kernel involves the mtd mchp23k256 driver storing chip capacity information in both OF match table and SPI id table. The probe function uses of_device_get_match_data() which can cause a non-OF SPI modalias match to incorrectly fall back to mchp23k256_caps even when the SPI id table selected a different part. The fix uses spi_get_device_match_data() to ensure SPI id-table driver_data is used when OF match data is absent.

Useful 0 Not Useful 0

Detection Guidance

This vulnerability is specific to the Linux kernel's mtd mchp23k256 driver and does not have network-based detection methods. To detect it, check if your system uses the affected driver by running: lsmod | grep mchp23k256. If loaded, verify the driver version with modinfo mchp23k256.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability could lead to incorrect MTD geometry being used for SPI devices that rely on the id table match rather than OF match data. This might cause storage devices to be misconfigured, potentially resulting in data corruption or improper functioning of flash memory chips.

Useful 0 Not Useful 0

Mitigation Strategies

Update your Linux kernel to a patched version that includes the fix for CVE-2026-68467. If using a custom kernel, ensure the mtd mchp23k256 driver is updated to use spi_get_device_match_data().

Useful 0 Not Useful 0