CVE-2026-68423
N/A
N/A
Summary
In the Linux kernel, the following vulnerability has been resolved:
mtd: virt_concat: fix use-after-free in mtd_virt_concat_destroy()
mtd_concat_destroy() frees item->concat so calling mtd_virt_concat_put_mtd_devices(item->concat) after that leads to a use-after-free.
Fix it by moving mtd_virt_concat_put_mtd_devices() before mtd_concat_destroy().
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Linux | Linux | 43db6366fc2de02050e66389f5628d3fdc9af10a < d36520e5da8bf87265b334def0daaadf3603cc62 | affected |
| Linux | Linux | 43db6366fc2de02050e66389f5628d3fdc9af10a < 4b45d7836b9526b8776af5f29219615be9417230 | affected |
| Linux | Linux | 7.1 | affected |
| Linux | Linux | 0 < 7.1 | unaffected |
| Linux | Linux | 7.1.6 <= 7.1.* | unaffected |
| Linux | Linux | 7.2-rc4 <= * | unaffected |
Weaknesses
References
- https://git.kernel.org/stable/c/d36520e5da8bf87265b334def0daaadf3603cc62
- https://git.kernel.org/stable/c/4b45d7836b9526b8776af5f29219615be9417230
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.