CVE-2026-68467

A flaw was found in the Linux kernel's mtd: mchp23k256 driver. This driver, responsible for managing memory technology devices (MTD), incorrectly determined the capabilities of certain SPI (Serial Peripheral Interface) flash chips. This could lead to the system misinterpreting the memory device's layout, potentially causing data corruption or system instability.

Red Hat has classified this vulnerability as Moderate severity because exploitation requires local access and specialized hardware, limiting the blast radius to a localized denial of service or memory corruption on systems using matching SPI devices. Furthermore, the vulnerable mchp23k256 driver is not enabled or included in standard Red Hat Enterprise Linux kernel builds. Consequently, default enterprise installations are not exposed to this flaw under normal operating conditions.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.