---
id: CVE-2026-72165
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  mtd: rawnand: fix condition in 'nand_select_target()'

  'cs' here must be in range [0:nanddev_ntargets[.
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  mtd: rawnand: fix condition in 'nand_select_target()'

  'cs' here must be in range [0:nanddev_ntargets[.
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 32813e288414fecce18f37f8f0d0414a64b45c56 <
    483a8a8581ee1274ec70e2561492096d4a7305e6
  - >-
    Linux >= 32813e288414fecce18f37f8f0d0414a64b45c56 <
    c2a131fb6882c98aada739479cc96df8748d0c24
  - >-
    Linux >= 32813e288414fecce18f37f8f0d0414a64b45c56 <
    e6df4fea1dc86c058e1918136c9b9d8e80c4be1b
  - >-
    Linux >= 32813e288414fecce18f37f8f0d0414a64b45c56 <
    3da4eb15c7b421c2d97c402bb7bd607c44822995
  - >-
    Linux >= 32813e288414fecce18f37f8f0d0414a64b45c56 <
    fbc7c8a1167b2eb56b2fd8598c29a3d5e9f8676e
  - >-
    Linux >= 32813e288414fecce18f37f8f0d0414a64b45c56 <
    4bbfcf9c7e46cae58257150bf834853559382e28
  - >-
    Linux >= 32813e288414fecce18f37f8f0d0414a64b45c56 <
    8f575fc17360827ca1d1940a84f3c7ee40407a10
  - >-
    Linux >= 32813e288414fecce18f37f8f0d0414a64b45c56 <
    8507c2cc9e4fa402401819f44d1e8a5ef4d11d8b
  - Linux 5.2
published: '2026-08-15'
updated: '2026-10-16'
sourceUpdated: '2026-10-16T19:17:12.610'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-72165'
references:
  - url: 'https://git.kernel.org/stable/c/3da4eb15c7b421c2d97c402bb7bd607c44822995'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/483a8a8581ee1274ec70e2561492096d4a7305e6'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/4bbfcf9c7e46cae58257150bf834853559382e28'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/8507c2cc9e4fa402401819f44d1e8a5ef4d11d8b'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/8f575fc17360827ca1d1940a84f3c7ee40407a10'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/c2a131fb6882c98aada739479cc96df8748d0c24'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/e6df4fea1dc86c058e1918136c9b9d8e80c4be1b'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/fbc7c8a1167b2eb56b2fd8598c29a3d5e9f8676e'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
  - cve.org
epss: 0.00164
epssPercentile: 0.05561
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-16T18:43:12.886709Z'
ingestedAt: '2026-10-16T19:46:24.425Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

mtd: rawnand: fix condition in 'nand_select_target()'

'cs' here must be in range [0:nanddev_ntargets[.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.