Use-After-Free Vulnerability in Linux Kernel Affecting MTD Subsystem

CVE-2026-68423

What is CVE-2026-68423?

A vulnerability has been identified in the Linux kernel's MTD subsystem that allows for a use-after-free condition. This occurs when the function mtd_concat_destroy() is called, leading to the premature freeing of item->concat. If mtd_virt_concat_put_mtd_devices(item->concat) is executed following this operation, it results in access to corrupted memory, which can lead to unexpected behavior or system crashes. The issue has been addressed by rearranging the call sequence, ensuring that mtd_virt_concat_put_mtd_devices() is executed before mtd_concat_destroy() to prevent such exploitation.

References