CVE-2026-68424

Unknown

Description

In the Linux kernel, the following vulnerability has been resolved: mtd: virt_concat: fix use-after-free in mtd_virt_concat_destroy_joins() mtd_concat_destroy() frees item->concat so calling mtd_virt_concat_put_mtd_devices(item->concat) leads to a use after free. Fix this by moving mtd_virt_concat_put_mtd_devices() before mtd_concat_destroy()

SeverityUnknown
CVSS—
Exploit probability—
ProductLinux
PublishedAug 10, 2026
First seenAug 10, 2026

How to fix

Update
  • Linux Linux4d91d783f93430c0efa834daff6640c07d87ebbc, 75c0c09541b49daa08fddbc2c18c2232f4eab7d8 or later

Affected products

ProductAffected versionsFixed in
Linux Linux43db6366fc2de02050e66389f5628d3fdc9af10a ≤ v < 4d91d783f93430c0efa834daff6640c07d87ebbc, 43db6366fc2de02050e66389f5628d3fdc9af10a ≤ v < 75c0c09541b49daa08fddbc2c18c2232f4eab7d8, 7.14d91d783f93430c0efa834daff6640c07d87ebbc, 75c0c09541b49daa08fddbc2c18c2232f4eab7d8

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2026-68424 · Linux · Dark Radar