CVE-2023-54104
High
Description
In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op() 'op-cs' is copied in 'fun->mchip_number' which is used to access the 'mchip_offsets' and the 'rnb_gpio' arrays. These arrays have NAND_MAX_CHIPS elements, so the index must be below this limit. Fix the sanity check in order to avoid the NAND_MAX_CHIPS value. This would lead to out-of-bound accesses.
SeverityHigh
CVSS7.8
Exploit probability—
Product
Linux
PublishedDec 24, 2025
First seenDec 24, 2025
How to fix
Update
- Linux Linux1f09d67d390647f83f8f9d26382b0daa43756e6f, eb7a5e4d14c8659cb97db6863316280e15f67209, f4b700c71802c81e6f9dce362ee7a0312c8377ba, 49e57caf967a969f6b955c88805f2d160910aa12, c6abce60338aa2080973cd95be0aedad528bb41f or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 54309d65776755bcdb9dcf3744cd764fc1e254ea ≤ v < 1f09d67d390647f83f8f9d26382b0daa43756e6f, 54309d65776755bcdb9dcf3744cd764fc1e254ea ≤ v < eb7a5e4d14c8659cb97db6863316280e15f67209, 54309d65776755bcdb9dcf3744cd764fc1e254ea ≤ v < f4b700c71802c81e6f9dce362ee7a0312c8377ba, 54309d65776755bcdb9dcf3744cd764fc1e254ea ≤ v < 49e57caf967a969f6b955c88805f2d160910aa12, 54309d65776755bcdb9dcf3744cd764fc1e254ea ≤ v < c6abce60338aa2080973cd95be0aedad528bb41f, 5.9 | 1f09d67d390647f83f8f9d26382b0daa43756e6f, eb7a5e4d14c8659cb97db6863316280e15f67209, f4b700c71802c81e6f9dce362ee7a0312c8377ba, 49e57caf967a969f6b955c88805f2d160910aa12, c6abce60338aa2080973cd95be0aedad528bb41f |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.