CVE-2026-72165

A flaw was found in the mtd: rawnand component of the Linux kernel. The nand_select_target() function contains an incorrect condition check for the 'cs' (chip select) parameter, allowing it to go out of its intended range. This out-of-bounds access could potentially lead to a system crash, resulting in a Denial of Service (DoS).

This vulnerability is rated as having a Low severity impact on Red Hat Enterprise Linux because it requires physical or virtualized systems equipped with specialized raw NAND flash storage hardware, which is uncommon in typical enterprise environments. Exploitation necessitates local access to interact with underlying Memory Technology Devices (MTD), limiting exposure primarily to specialized embedded deployments. Even on configurations where such hardware is active, the blast radius is confined to a local kernel crash resulting in a denial of service, with no compromise to data confidentiality or system integrity.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.