VYPR
Unrated severityNVD Advisory· Published Aug 10, 2026

CVE-2026-68424

CVE-2026-68424

Description

In the Linux kernel, the following vulnerability has been resolved:

mtd: virt_concat: fix use-after-free in mtd_virt_concat_destroy_joins()

mtd_concat_destroy() frees item->concat so calling mtd_virt_concat_put_mtd_devices(item->concat) leads to a use after free.

Fix this by moving mtd_virt_concat_put_mtd_devices() before mtd_concat_destroy()

Affected products

1

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.