PT-2025-54141 · Linux · Linux Kernel
Published
2025-12-30
·
Updated
2026-02-24
·
CVE-2023-54295
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A flaw exists in the Linux kernel’s spi-nor subsystem within the
spi nor set erase type() function. This function was susceptible to a shift-out-of-bounds error when masking out an erase type, triggered by an excessively large shift exponent. Specifically, the code incorrectly set the size shift and mask, as well as the opcode, when the erase size was zero. This resulted in a potential crash due to the shift-out-of-bounds condition. The issue stemmed from unnecessary operations when masking out an erase type, and the use of an arbitrary opcode value (0xFF) that was not guaranteed to be unused.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux Kernel