CVE-2026-68423

Unknown

Description

In the Linux kernel, the following vulnerability has been resolved: mtd: virt_concat: fix use-after-free in mtd_virt_concat_destroy() mtd_concat_destroy() frees item->concat so calling mtd_virt_concat_put_mtd_devices(item->concat) after that leads to a use-after-free. Fix it by moving mtd_virt_concat_put_mtd_devices() before mtd_concat_destroy().

SeverityUnknown
CVSS—
Exploit probability—
ProductLinux
PublishedAug 10, 2026
First seenAug 10, 2026

How to fix

Update
  • Linux Linuxd36520e5da8bf87265b334def0daaadf3603cc62, 4b45d7836b9526b8776af5f29219615be9417230 or later

Affected products

ProductAffected versionsFixed in
Linux Linux43db6366fc2de02050e66389f5628d3fdc9af10a ≤ v < d36520e5da8bf87265b334def0daaadf3603cc62, 43db6366fc2de02050e66389f5628d3fdc9af10a ≤ v < 4b45d7836b9526b8776af5f29219615be9417230, 7.1d36520e5da8bf87265b334def0daaadf3603cc62, 4b45d7836b9526b8776af5f29219615be9417230

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2026-68423 · Linux · Dark Radar