CVE-2026-68424: mtd: virt_concat: fix use-after-free in mtd_virt_concat_destroy_joins()
In the Linux kernel, the following vulnerability has been resolved:
mtd: virtconcat: fix use-after-free in mtdvirtconcatdestroyjoins()
mtdconcatdestroy() frees item->concat so calling mtdvirtconcatputmtddevices(item->concat) leads to a use after free.
Fix this by moving mtdvirtconcatputmtddevices() before mtdconcatdestroy()
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68424?
CVE-2026-68424 has a risk rating of 41, indicating a significant vulnerability in the Linux kernel.
How do I fix CVE-2026-68424?
To fix CVE-2026-68424, ensure that your Linux kernel is updated to the version that includes the patch for this vulnerability.
What type of vulnerability is CVE-2026-68424?
CVE-2026-68424 is classified as a Use After Free vulnerability in the Linux kernel.
What component is affected by CVE-2026-68424?
CVE-2026-68424 affects the mtd: virt_concat component of the Linux kernel.
When was CVE-2026-68424 published?
CVE-2026-68424 was published on August 10, 2026.