---
id: CVE-2026-72165
title: 'mtd: rawnand: fix condition in ''nand_select_target()'''
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  mtd: rawnand: fix condition in 'nand_select_target()'

  'cs' here must be in range [0:nanddev_ntargets[.
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 32813e288414fecce18f37f8f0d0414a64b45c56 <
    483a8a8581ee1274ec70e2561492096d4a7305e6
  - >-
    Linux >= 32813e288414fecce18f37f8f0d0414a64b45c56 <
    c2a131fb6882c98aada739479cc96df8748d0c24
  - >-
    Linux >= 32813e288414fecce18f37f8f0d0414a64b45c56 <
    e6df4fea1dc86c058e1918136c9b9d8e80c4be1b
  - >-
    Linux >= 32813e288414fecce18f37f8f0d0414a64b45c56 <
    3da4eb15c7b421c2d97c402bb7bd607c44822995
  - >-
    Linux >= 32813e288414fecce18f37f8f0d0414a64b45c56 <
    fbc7c8a1167b2eb56b2fd8598c29a3d5e9f8676e
  - >-
    Linux >= 32813e288414fecce18f37f8f0d0414a64b45c56 <
    4bbfcf9c7e46cae58257150bf834853559382e28
  - >-
    Linux >= 32813e288414fecce18f37f8f0d0414a64b45c56 <
    8f575fc17360827ca1d1940a84f3c7ee40407a10
  - >-
    Linux >= 32813e288414fecce18f37f8f0d0414a64b45c56 <
    8507c2cc9e4fa402401819f44d1e8a5ef4d11d8b
  - Linux 5.2
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-16T18:43:12.886709Z'
published: '2026-08-15'
updated: '2026-10-16'
sourceUpdated: '2026-10-16T18:44:59.914Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-72165'
references:
  - url: 'https://git.kernel.org/stable/c/483a8a8581ee1274ec70e2561492096d4a7305e6'
  - url: 'https://git.kernel.org/stable/c/c2a131fb6882c98aada739479cc96df8748d0c24'
  - url: 'https://git.kernel.org/stable/c/e6df4fea1dc86c058e1918136c9b9d8e80c4be1b'
  - url: 'https://git.kernel.org/stable/c/3da4eb15c7b421c2d97c402bb7bd607c44822995'
  - url: 'https://git.kernel.org/stable/c/fbc7c8a1167b2eb56b2fd8598c29a3d5e9f8676e'
  - url: 'https://git.kernel.org/stable/c/4bbfcf9c7e46cae58257150bf834853559382e28'
  - url: 'https://git.kernel.org/stable/c/8f575fc17360827ca1d1940a84f3c7ee40407a10'
  - url: 'https://git.kernel.org/stable/c/8507c2cc9e4fa402401819f44d1e8a5ef4d11d8b'
tags:
  - cve.org
epss: 0.00164
epssPercentile: 0.05246
ingestedAt: '2026-10-16T19:46:24.425Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

mtd: rawnand: fix condition in 'nand_select_target()'

'cs' here must be in range [0:nanddev_ntargets[.

## Affected

- `Linux >= 32813e288414fecce18f37f8f0d0414a64b45c56 < 483a8a8581ee1274ec70e2561492096d4a7305e6`
- `Linux >= 32813e288414fecce18f37f8f0d0414a64b45c56 < c2a131fb6882c98aada739479cc96df8748d0c24`
- `Linux >= 32813e288414fecce18f37f8f0d0414a64b45c56 < e6df4fea1dc86c058e1918136c9b9d8e80c4be1b`
- `Linux >= 32813e288414fecce18f37f8f0d0414a64b45c56 < 3da4eb15c7b421c2d97c402bb7bd607c44822995`
- `Linux >= 32813e288414fecce18f37f8f0d0414a64b45c56 < fbc7c8a1167b2eb56b2fd8598c29a3d5e9f8676e`
- `Linux >= 32813e288414fecce18f37f8f0d0414a64b45c56 < 4bbfcf9c7e46cae58257150bf834853559382e28`
- `Linux >= 32813e288414fecce18f37f8f0d0414a64b45c56 < 8f575fc17360827ca1d1940a84f3c7ee40407a10`
- `Linux >= 32813e288414fecce18f37f8f0d0414a64b45c56 < 8507c2cc9e4fa402401819f44d1e8a5ef4d11d8b`
- `Linux 5.2`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.