CVE-2026-68467: mtd: mchp23k256: use SPI match data for chip caps
In the Linux kernel, the following vulnerability has been resolved:
mtd: mchp23k256: use SPI match data for chip caps
The driver stores chip capacity information in both the OF match table and the SPI id table. Probe currently uses ofdevicegetmatchdata(), so a non-OF SPI modalias match falls back to mchp23k256caps even when the SPI id table selected a different part.
Use spigetdevicematchdata() so SPI id-table driverdata is consumed when OF match data is absent. This keeps the existing default fallback while avoiding the wrong MTD geometry for id-table-only matches.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68467?
The severity of CVE-2026-68467 is rated at 12.
How do I fix CVE-2026-68467?
To fix CVE-2026-68467, you should update the Linux kernel to the version that includes the patch for this vulnerability.
Which systems are affected by CVE-2026-68467?
CVE-2026-68467 affects systems running the Linux kernel that utilize the mchp23k256 driver.
What type of vulnerability is CVE-2026-68467?
CVE-2026-68467 is a vulnerability related to improper handling of chip capacity information in the Linux kernel.
When was CVE-2026-68467 published?
CVE-2026-68467 was published on August 15, 2026.