CVE-2026-98833: mtd: core: call _get_device() with the master MTD
Published Oct 18, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
mtd: core: call getdevice() with the master MTD
getmtddevice() calls the master's getdevice() callback with mtd, which may be a partition. putmtddevice() passes the master.
This breaks gluebi partitions because gluebigetdevice() uses containerof() and therefore requires the master MTD. Pass the master to getdevice(), matching putdevice().
Affected Software
1 affected component
Linux Linux kernel
Event History
Oct 18, 2026
CVE Published
via MITRE·03:49 PM
Data Sourced
via MITRE·03:49 PM
Description
Data Sourced
via NVD·04:17 PM
Description