GHSA-8hqq-jf47-jqrxunknown

In the Linux kernel, the following vulnerability has been resolved: mtd: virt_concat: fix use...

Published
August 10, 2026
Last Modified
August 10, 2026

🔗 CVE IDs covered (1)

📋 Description

In the Linux kernel, the following vulnerability has been resolved:

mtd: virt_concat: fix use-after-free in mtd_virt_concat_destroy()

mtd_concat_destroy() frees item->concat so calling mtd_virt_concat_put_mtd_devices(item->concat) after that leads to a use-after-free.

Fix it by moving mtd_virt_concat_put_mtd_devices() before mtd_concat_destroy().

🔗 References (4)