Critical severity9.8NVD Advisory· Published Jul 27, 2019· Updated Jun 17, 2026

CVE-2016-10764

Description

In the Linux kernel before 4.9.6, there is an off by one in the drivers/mtd/spi-nor/cadence-quadspi.c cqspi_setup_flash() function. There are CQSPI_MAX_CHIPSELECT elements in the ->f_pdata array so the ">" should be ">=" instead.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Linux/Kernel2 versions
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=4.8,<4.9.6
- (no CPE)range: <4.9.6
Linux/Linux kerneldescription

Patches

Vulnerability mechanics

References

git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/nvdPatchVendor Advisory
github.com/torvalds/linux/commit/193e87143c290ec16838f5368adc0e0bc94eb931nvdPatchThird Party Advisory
mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.6nvdRelease NotesThird Party Advisory
support.f5.com/csp/article/K24444495nvdThird Party Advisory
support.f5.com/csp/article/K24444495nvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.002
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000