CVE-2026-89952

A flaw was found in the Linux kernel's mtd: rawnand component. The nand_flash_detect_ext_param_page() function fails to validate if the fixed page and subsequent variable-length sections of an ONFI (Open NAND Flash Interface) extended parameter page fit within the allocated memory. This improper validation could lead to memory corruption when processing a specially crafted ONFI extended parameter page.

This vulnerability is rated as Moderate impact for Red Hat Enterprise Linux because exploitation requires physical or specialized access to attach or emulate a malicious raw NAND flash device during hardware detection. Standard enterprise servers and cloud deployments utilize storage abstracted behind block device interfaces (such as NVMe or SATA SSDs) rather than raw Memory Technology Device (MTD) NAND hardware. Consequently, typical environments are not exposed to this flaw, and potential impact is confined to a local denial of service through kernel crash on systems utilizing raw ONFI NAND memory.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.