CVE-2026-68468: mtd: virt-concat: free duplicate generated name
In the Linux kernel, the following vulnerability has been resolved:
mtd: virt-concat: free duplicate generated name
Every MTD registration runs mtdvirtconcatcreatejoin(). Once a virtual concat has already been registered, the function builds the same name again and takes the equal-name branch. That branch skips to the next item without freeing the newly allocated string.
Free the temporary name before continuing.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68468?
CVE-2026-68468 has a risk score of 5, indicating a medium severity level.
How do I fix CVE-2026-68468?
To fix CVE-2026-68468, update your Linux kernel to the latest version that includes the patch for this vulnerability.
What systems are affected by CVE-2026-68468?
CVE-2026-68468 affects the Linux kernel with vulnerabilities related to MTD registration.
What does CVE-2026-68468 impact?
CVE-2026-68468 impacts the MTD (Memory Technology Device) subsystem in the Linux kernel.
What is the nature of the flaw in CVE-2026-68468?
CVE-2026-68468 involves the free duplicate generated name due to improper handling of virtual concat registrations.