CVE-2026-80597: mtd: maps: vmu-flash: fix NULL pointer dereference in initialization

Published Aug 28, 2026

Updated

In the Linux kernel, the following vulnerability has been resolved:

mtd: maps: vmu-flash: fix NULL pointer dereference in initialization

The mtdinfo contains a struct device, which must be linked to its parent. Without this, the initialization of the MTD fails with a NULL pointer dereference.

Affected Software

1 affected component

Linux Kernel

Event History

Aug 28, 2026

CVE Published

via MITRE·06:48 AM

Data Sourced

via MITRE·06:48 AM

Description

Frequently Asked Questions

What systems are exposed to this issue?

Systems using the Linux kernel's mtd maps vmu-flash component are exposed during MTD initialization. The provided information does not identify affected kernel versions or platforms.

When does the failure occur?

The NULL pointer dereference occurs when the MTD is initialized without its embedded struct device linked to a parent device. This causes MTD initialization to fail.

How can administrators determine whether they are affected?

Check whether the running kernel includes the referenced stable fixes and whether the vmu-flash MTD map is used. Affected systems may fail during MTD initialization with a NULL pointer dereference.

CVE-2026-80597: mtd: maps: vmu-flash: fix NULL pointer dereference in initialization

Affected Software

Event History

Frequently Asked Questions

What systems are exposed to this issue?

When does the failure occur?

How can administrators determine whether they are affected?

Company

Resources

Contact

Frequently Asked Questions

What systems are exposed to this issue?

When does the failure occur?

How can administrators determine whether they are affected?