In the Linux kernel, the following vulnerability has been resolved:
mtd: rawnand: serialize lock/unlock against other NAND operations
nand_lock() and nand_unlock() call into chip->ops.lock_area/unlock_area without holding the NAND device lock. On controllers that implement SET_FEATURES via multiple low-level PIO commands, these can race with concurrent UBI/UBIFS background erase/write operations that hold the device lock, resulting in cmd_pending conflicts on the NAND controller.
Add nand_get_device()/nand_release_device() around the lock/unlock operations to serialize them against all other NAND controller access.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | May 3, 2026 | May 3, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Apr 3, 2026 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1109-oracleUpgrade linux-image-5.15.0-1111-realtimeUpgrade linux-image-azure-fips-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-5.15.0-1106-raspiUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-oracle-6.8Upgrade linux-image-intelUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-1059-gkeUpgrade linux-image-5.15.0-184-lowlatencyUpgrade linux-image-5.15.0-186-fipsUpgrade linux-image-5.15.0-186-genericUpgrade linux-image-nvidia-64kUpgrade linux-image-realtime-5.15Upgrade linux-image-ibm-6.8Upgrade linux-image-5.15.0-1112-aws-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1063-azure-fipsUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1117-azure-fipsUpgrade linux-image-raspiUpgrade linux-image-5.15.0-186-generic-lpaeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-azureUpgrade linux-image-azure-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-oem-20.04cUpgrade linux-image-xilinx-6.8Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-5.15.0-1053-nvidia-tegra-igx-rtUpgrade linux-image-gcp-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-1064-nvidia-tegra-rtUpgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-azure-5.15Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-fips-6.8Upgrade linux-image-fips-5.15Upgrade linux-image-5.15.0-186-generic-64kUpgrade linux-image-xilinxUpgrade linux-image-5.15.0-1053-nvidia-tegra-igxUpgrade linux-image-realtimeUpgrade linux-image-5.15.0-1112-awsUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-22.04dUpgrade linux-image-raspi-6.8Upgrade linux-image-6.8.0-1030-nvidia-tegraUpgrade linux-image-kvmUpgrade linux-image-kvm-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-nvidia-tegraUpgrade linux-image-gke-6.8Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1059-nvidiaUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-azure-fipsUpgrade linux-image-laptop-23.10Upgrade linux-image-raspi-realtimeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-1063-azureUpgrade linux-image-gke-64k-6.8Upgrade linux-image-gcpUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-oem-22.04bUpgrade linux-image-gkeop-5.15Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-1059-gke-64kUpgrade linux-image-aws-fips-6.8Upgrade linux-image-azure-fde-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1108-gkeUpgrade linux-image-generic-6.8Upgrade linux-image-aws-64kUpgrade linux-image-nvidia-5.15Upgrade linux-image-generic-64kUpgrade linux-image-aws-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1058-oracleUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1061-aws-fipsUpgrade linux-image-5.15.0-1064-nvidia-tegraUpgrade linux-image-6.8.0-136-genericUpgrade linux-image-oracle-64kUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-5.15.0-1104-intel-iot-realtimeUpgrade linux-image-oem-20.04Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-virtual-5.15Upgrade linux-image-oracle-5.15Upgrade linux-image-6.8.0-1059-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1061-ibmUpgrade linux-image-gkeopUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-raspi-5.15Upgrade linux-image-virtual-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-5.15Upgrade linux-image-lowlatencyUpgrade linux-image-gcp-6.8Upgrade linux-image-azure-fips-5.15Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1112-gcp-fipsUpgrade linux-image-5.15.0-1107-nvidiaUpgrade linux-image-5.15.0-1106-ibmUpgrade linux-image-5.15.0-1107-intel-iotgUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1061-awsUpgrade linux-image-nvidiaUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-5.15.0-1117-azure-fdeUpgrade linux-image-6.8.0-136-fipsUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-5.15.0-1112-gcpUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1058-oracle-64kUpgrade linux-image-5.15.0-184-lowlatency-64kUpgrade linux-image-6.8.0-1064-gcpUpgrade linux-image-aws-fipsUpgrade linux-image-awsUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.1-1056-realtimeUpgrade linux-image-6.8.0-1059-nvidia-lowlatencyUpgrade linux-image-6.8.0-1033-xilinxUpgrade linux-image-6.8.0-1030-nvidia-tegra-rtUpgrade linux-image-aws-5.15Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-5.15.0-1117-azureUpgrade linux-image-5.15.0-1095-gkeopUpgrade linux-image-5.15.0-1104-kvmUpgrade linux-image-5.15.0-1075-xilinx-zynqmpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-aws-fips-5.15Upgrade linux-image-virtualUpgrade linux-image-nvidia-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-6.8.0-136-lowlatencyUpgrade linux-image-6.8.0-1064-gcp-fipsUpgrade linux-image-6.8.0-1064-gcp-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-136-lowlatency-64kUpgrade linux-image-oracleUpgrade linux-image-gke-5.15Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gcp-5.15Upgrade linux-image-fipsUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1061-aws-64kUpgrade linux-image-6.8.0-1059-nvidia-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-5.15.0-1112-aws-fipsUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-aws-64k-5.15Upgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-ibm-5.15Upgrade linux-image-gkeop-6.8Upgrade linux-image-gke-64kUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-2050-raspi-realtimeUpgrade linux-image-6.8.0-1061-raspiUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.8.0-1046-gkeopUpgrade linux-image-azure-fde-5.15Upgrade linux-image-generic-5.15Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-5.15.0-1107-nvidia-lowlatency | Jul 20, 2026 | Apr 3, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Apr 3, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub