CVE-2026-23434

A flaw was found in the mtd: rawnand subsystem of the Linux kernel. This vulnerability occurs because the nand_lock() and nand_unlock() functions do not properly coordinate with other NAND operations. This can lead to a race condition where concurrent Universal Block Image (UBI) or UBIFS background operations interfere with lock/unlock calls, causing command conflicts on the NAND controller. Such conflicts can result in system instability or a denial of service.

This vulnerability is rated as having Low severity because raw NAND flash hardware is rarely present in typical enterprise deployments, and triggering the race condition requires local privileges alongside specific concurrent flash operations. Standard installations of Red Hat Enterprise Linux run on enterprise server or virtualized environments that do not utilize raw NAND storage controllers or the associated memory technology device subsystem. As a result, default configurations are unaffected unless the host is deployed on specialized hardware utilizing raw NAND flash with active background storage management.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.