CVE-2024-56771 Details
Description
In the Linux kernel, the following vulnerability has been resolved: mtd: spinand: winbond: Fix 512GW, 01GW, 01JW and 02JW ECC information These four chips: * W25N512GW * W25N01GW * W25N01JW * W25N02JW all require a single bit of ECC strength and thus feature an on-die Hamming-like ECC engine. There is no point in filling a ->get_status() callback for them because the main ECC status bytes are located in standard places, and retrieving the number of bitflips in case of corrected chunk is both useless and unsupported (if there are bitflips, then there is 1 at most, so no need to query the chip for that). Without this change, a kernel warning triggers every time a bit flips.
A vulnerability in the Linux kernel's management of ECC (Error Correction Code) for certain Winbond NAND flash chips has been addressed. The affected chips include the W25N512GW, W25N01GW, W25N01JW, and W25N02JW, all of which require a single bit of ECC strength and have an on-die Hamming-like ECC engine. Previously, the kernel issued a warning for unnecessary ECC status queries, as the main ECC status bytes are located in standard positions and the chips only support reporting a maximum of one bit flip in corrected data. This vulnerability could lead to misleading kernel warnings about ECC bit flips that are not indicative of a larger issue.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Oct 1, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/234d5f75c3ae911b52c5e4442b8a87fbbd129836 | kernel.org | Patch |
| https://git.kernel.org/stable/c/fee9b240916df82a8b07aef0fdfe96785417a164 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.7, < 6.12.4 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Oct 1, 2025 | CVE Modified | CISA-ADP |
| Jan 10, 2025 | Initial Analysis | [email protected] |
| Jan 8, 2025 | New CVE Received | kernel.org |