{"id":"CVE-2026-68424","summary":"mtd: virt_concat: fix use-after-free in mtd_virt_concat_destroy_joins()","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nmtd: virt_concat: fix use-after-free in mtd_virt_concat_destroy_joins()\n\nmtd_concat_destroy() frees item-\u003econcat so calling\nmtd_virt_concat_put_mtd_devices(item-\u003econcat) leads to a use after free.\n\nFix this by moving mtd_virt_concat_put_mtd_devices() before\nmtd_concat_destroy()","modified":"2026-08-12T03:34:23.012566023Z","published":"2026-08-10T12:04:44.975Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68424.json","cna_assigner":"Linux"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/4d91d783f93430c0efa834daff6640c07d87ebbc"},{"type":"WEB","url":"https://git.kernel.org/stable/c/75c0c09541b49daa08fddbc2c18c2232f4eab7d8"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68424.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68424"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"43db6366fc2de02050e66389f5628d3fdc9af10a"},{"fixed":"4d91d783f93430c0efa834daff6640c07d87ebbc"},{"fixed":"75c0c09541b49daa08fddbc2c18c2232f4eab7d8"}]}],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-68424.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.1.0"},{"fixed":"7.1.6"}]}],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-68424.json"}}],"schema_version":"1.9.0"}