CVE-2026-68423: mtd: virt_concat: fix use-after-free in mtd_virt_concat_destroy()
In the Linux kernel, the following vulnerability has been resolved:
mtd: virtconcat: fix use-after-free in mtdvirtconcatdestroy()
mtdconcatdestroy() frees item->concat so calling mtdvirtconcatputmtddevices(item->concat) after that leads to a use-after-free.
Fix it by moving mtdvirtconcatputmtddevices() before mtdconcatdestroy().
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68423?
CVE-2026-68423 is classified with a risk score of 40.
What type of vulnerability is CVE-2026-68423?
CVE-2026-68423 is a use-after-free vulnerability in the Linux Kernel.
How does CVE-2026-68423 affect the Linux Kernel?
CVE-2026-68423 can lead to a use-after-free condition when calling mtd_virt_concat_put_mtd_devices after item->concat is freed.
How do I fix CVE-2026-68423?
To address CVE-2026-68423, ensure you apply the recommended patches from the Linux Kernel updates.
In which component of the Linux Kernel does CVE-2026-68423 occur?
CVE-2026-68423 occurs in the mtd: virt_concat component of the Linux Kernel.