CVE-2026-45896: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: mtd: intel-dg: Fix accessing regions before setting nregions The regions array is counted by nregions, but it's set only after accessing it: [] UBSAN: array-index-out-of-bounds in drivers/mtd/devices/mtd_intel_dg.c:750:15 [] index 0 is out of range for type '<unknown> [*]' Fix it by also fixing an undesired behavior: the loop silently ignores ENOMEM and continues setting the other entries.

Засегнати продукти

• Linux Linux: ceb5ab3cb64637952657be23d347e1c79dd02212 преди 721bd22bcf45a63ebd9bd0f478ef721b45cc5383; ceb5ab3cb64637952657be23d347e1c79dd02212 преди d58fca8513414b15387460b14a7a0a30405b9c9e; ceb5ab3cb64637952657be23d347e1c79dd02212 преди 779c59274d03cc5c07237a2c845dfb71cff77705
• Linux Linux: 6.17; преди 6.17; 6.18.14 до 6.18.*; 6.19.4 до 6.19.*; от 7.0 нататък

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99265
• CVE-2026-99261
• CVE-2026-99260

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-45896
• https://nvd.nist.gov/vuln/detail/CVE-2026-45896
• https://git.kernel.org/stable/c/721bd22bcf45a63ebd9bd0f478ef721b45cc5383
• https://git.kernel.org/stable/c/d58fca8513414b15387460b14a7a0a30405b9c9e
• https://git.kernel.org/stable/c/779c59274d03cc5c07237a2c845dfb71cff77705