CVE-2026-89952

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the nand flash detect ext param page() function where the system allocates memory based on the length declared by the ONFI parameter page. The function treats the data as a fixed header followed by variable-length sections but fails to verify if the fixed page and each subsequent section fit within the allocated memory before advancing. This lack of validation can lead to memory access issues when processing malformed ONFI sections.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.