Riskcovery

CVE-2026-68423

mtd: virt_concat: fix use-after-free in mtd_virt_concat_destroy()

State
Published
Severity
Not scored
Published
Aug 10, 2026
Updated
Aug 17, 2026
Reserved
Jul 30, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

mtd: virt_concat: fix use-after-free in mtd_virt_concat_destroy()

mtd_concat_destroy() frees item->concat so calling mtd_virt_concat_put_mtd_devices(item->concat) after that leads to a use-after-free.

Fix it by moving mtd_virt_concat_put_mtd_devices() before mtd_concat_destroy().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 43db6366fc2de02050e66389f5628d3fdc9af10a to before d36520e5da8bf87265b334def0daaadf3603cc62Affected
  • 43db6366fc2de02050e66389f5628d3fdc9af10a to before 4b45d7836b9526b8776af5f29219615be9417230Affected
LinuxLinux
  • 7.1Affected
  • before 7.1Not affected
  • 7.1.6 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.