Riskcovery

CVE-2026-68424

mtd: virt_concat: fix use-after-free in mtd_virt_concat_destroy_joins()

State
Published
Severity
Not scored
Published
Aug 10, 2026
Updated
Aug 17, 2026
Reserved
Jul 30, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

mtd: virt_concat: fix use-after-free in mtd_virt_concat_destroy_joins()

mtd_concat_destroy() frees item->concat so calling mtd_virt_concat_put_mtd_devices(item->concat) leads to a use after free.

Fix this by moving mtd_virt_concat_put_mtd_devices() before mtd_concat_destroy()

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 43db6366fc2de02050e66389f5628d3fdc9af10a to before 4d91d783f93430c0efa834daff6640c07d87ebbcAffected
  • 43db6366fc2de02050e66389f5628d3fdc9af10a to before 75c0c09541b49daa08fddbc2c18c2232f4eab7d8Affected
LinuxLinux
  • 7.1Affected
  • before 7.1Not affected
  • 7.1.6 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.