{"id":"CVE-2026-98833","title":"mtd: core: call _get_device() with the master MTD","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nmtd: core: call _get_device() with the master MTD\n\n__get_mtd_device() calls the master's _get_device() callback with mtd,\nwhich may be a partition. __put_mtd_device() p…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 46b5889cc2c54bac7d7e727a44d28a298df23cef < 95c8f36293c22d450c371167ad4f9a5bbadc7539","Linux >= 46b5889cc2c54bac7d7e727a44d28a298df23cef < f971f1c63cf71579258360a12bd185bc1cd1a043","Linux >= 46b5889cc2c54bac7d7e727a44d28a298df23cef < dc482a281a19a7d7e91ad1b2d551bb301c54d0e6","Linux >= 46b5889cc2c54bac7d7e727a44d28a298df23cef < 12b31d1acd20b3185bb5f0748db0cf6874c8e9d1","Linux 5.7"],"published":"2026-10-18","updated":"2026-10-18","sourceUpdated":"2026-10-18T15:49:42.181Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98833","references":[{"url":"https://git.kernel.org/stable/c/95c8f36293c22d450c371167ad4f9a5bbadc7539"},{"url":"https://git.kernel.org/stable/c/f971f1c63cf71579258360a12bd185bc1cd1a043"},{"url":"https://git.kernel.org/stable/c/dc482a281a19a7d7e91ad1b2d551bb301c54d0e6"},{"url":"https://git.kernel.org/stable/c/12b31d1acd20b3185bb5f0748db0cf6874c8e9d1"}],"tags":["cve.org"],"ingestedAt":"2026-10-18T16:47:32.470Z","slug":"CVE-2026-98833","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nmtd: core: call _get_device() with the master MTD\n\n__get_mtd_device() calls the master's _get_device() callback with mtd,\nwhich may be a partition. __put_mtd_device() passes the master.\n\nThis breaks gluebi partitions because gluebi_get_device() uses\ncontainer_of() and therefore requires the master MTD. Pass the master\nto _get_device(), matching _put_device().\n\n## Affected\n\n- `Linux >= 46b5889cc2c54bac7d7e727a44d28a298df23cef < 95c8f36293c22d450c371167ad4f9a5bbadc7539`\n- `Linux >= 46b5889cc2c54bac7d7e727a44d28a298df23cef < f971f1c63cf71579258360a12bd185bc1cd1a043`\n- `Linux >= 46b5889cc2c54bac7d7e727a44d28a298df23cef < dc482a281a19a7d7e91ad1b2d551bb301c54d0e6`\n- `Linux >= 46b5889cc2c54bac7d7e727a44d28a298df23cef < 12b31d1acd20b3185bb5f0748db0cf6874c8e9d1`\n- `Linux 5.7`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}