CVE-2023-54104

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the Linux kernel related to out-of-bounds access within the fun exec op() function in the rawnand/fsl upm module. The op-cs value is copied into fun->mchip number, which is then used to access the mchip offsets and rnb gpio arrays. These arrays are limited to NAND MAX CHIPS elements, and the sanity check was insufficient, potentially allowing access beyond this limit. This could lead to out-of-bounds reads or writes.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.