CVE-2026-68424
N/A
N/A
Summary
In the Linux kernel, the following vulnerability has been resolved:
mtd: virt_concat: fix use-after-free in mtd_virt_concat_destroy_joins()
mtd_concat_destroy() frees item->concat so calling mtd_virt_concat_put_mtd_devices(item->concat) leads to a use after free.
Fix this by moving mtd_virt_concat_put_mtd_devices() before mtd_concat_destroy()
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Linux | Linux | 43db6366fc2de02050e66389f5628d3fdc9af10a < 4d91d783f93430c0efa834daff6640c07d87ebbc | affected |
| Linux | Linux | 43db6366fc2de02050e66389f5628d3fdc9af10a < 75c0c09541b49daa08fddbc2c18c2232f4eab7d8 | affected |
| Linux | Linux | 7.1 | affected |
| Linux | Linux | 0 < 7.1 | unaffected |
| Linux | Linux | 7.1.6 <= 7.1.* | unaffected |
| Linux | Linux | 7.2-rc4 <= * | unaffected |
Weaknesses
References
- https://git.kernel.org/stable/c/4d91d783f93430c0efa834daff6640c07d87ebbc
- https://git.kernel.org/stable/c/75c0c09541b49daa08fddbc2c18c2232f4eab7d8
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.