8

CVE-2026-89954

mtd: afs: validate v2 image info bounds

In the Linux kernel, the following vulnerability has been resolved:

mtd: afs: validate v2 image info bounds

The AFS v2 parser uses footer[8] to locate the image information block
inside the current erase block, then uses the image information
region_count to walk entries from a fixed local array. The footer offset
and region count come from flash contents and are not checked against the
erase block or the local image-info array before use.

Reject v2 entries whose image information offset would underflow the
erase block calculation, and reject region counts that cannot fit in the
local image-info array before walking region entries.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version b7cf5e2830bbb128699d7635ce8404b7f605bc95
Version < 1bec05a68414cf8d0cab6cb42445b8603f32ffc4
Status affected
Version b7cf5e2830bbb128699d7635ce8404b7f605bc95
Version < 3ad8ff12fd44b08af9212ac4883a7e29d2ab7348
Status affected
Version b7cf5e2830bbb128699d7635ce8404b7f605bc95
Version < 875daa3c750814ff2e2dc050239c390048f0bcd0
Status affected
Version b7cf5e2830bbb128699d7635ce8404b7f605bc95
Version < da740539e8f370767317e24615349b9342a6e773
Status affected
Version b7cf5e2830bbb128699d7635ce8404b7f605bc95
Version < 1edea8900ca3e405c1421d8b5c29f97107874f72
Status affected
Version b7cf5e2830bbb128699d7635ce8404b7f605bc95
Version < 18916f475057cbd2fb8ea6ae86e6b85884ad1d53
Status affected
Version b7cf5e2830bbb128699d7635ce8404b7f605bc95
Version < d14e6298139f58a87a87d7022e26a7f37f0ddce7
Status affected
Version b7cf5e2830bbb128699d7635ce8404b7f605bc95
Version < e9290031f736e99ad17c25c00311c92c266843b7
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 5.2
Status affected
Version 0
Version < 5.2
Status unaffected
Version <= 5.10.*
Version 5.10.270
Status unaffected
Version <= 5.15.*
Version 5.15.221
Status unaffected
Version <= 6.1.*
Version 6.1.188
Status unaffected
Version <= 6.6.*
Version 6.6.157
Status unaffected
Version <= 6.12.*
Version 6.12.110
Status unaffected
Version <= 6.18.*
Version 6.18.51
Status unaffected
Version <= 7.2.*
Version 7.2.5
Status unaffected
Version <= *
Version 7.3-rc1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.18% 0.079
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 8 2.5 5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/1bec05a68414cf8d0cab6cb42445b8603f32ffc4
https://git.kernel.org/stable/c/3ad8ff12fd44b08af9212ac4883a7e29d2ab7348
https://git.kernel.org/stable/c/875daa3c750814ff2e2dc050239c390048f0bcd0
https://git.kernel.org/stable/c/da740539e8f370767317e24615349b9342a6e773
https://git.kernel.org/stable/c/1edea8900ca3e405c1421d8b5c29f97107874f72
https://git.kernel.org/stable/c/18916f475057cbd2fb8ea6ae86e6b85884ad1d53
https://git.kernel.org/stable/c/d14e6298139f58a87a87d7022e26a7f37f0ddce7
https://git.kernel.org/stable/c/e9290031f736e99ad17c25c00311c92c266843b7