CVE-2026-45896 is a vulnerability in the Linux kernel's mtd: intel-dg driver where the regions array is accessed before the nregions variable is initialized, causing an array-index-out-of-bounds error detected by UBSAN. The fix involved setting nregions before accessing the array and correcting a loop that silently ignored ENOMEM errors, preventing potential memory corruption or denial of service. The vulnerability has a CVSS 3.1 score of 7.8, indicating high severity with local attack vector, low attack complexity, requiring low privileges and no user interaction, and impacts confidentiality, integrity, and availability.

The vulnerability allows local attackers with low privileges to cause out-of-bounds memory access in the Linux kernel's mtd: intel-dg driver, potentially leading to memory corruption, denial of service, or escalation of privileges. The CVSS score of 7.8 reflects high impact on confidentiality, integrity, and availability.

No explicit patch links are provided in the data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is confirmed, avoid running untrusted code with privileges that can access the vulnerable driver. Monitor vendor advisories for updates and apply kernel updates once available.