CVE-2026-98833None▾ SunlitIn the Linux kernel, the following vulnerability has been resolved: mtd: core: call _get_device() with the master MTD __get_mtd_device() calls the master's _get_device() callback with mtd, which may be a partition. __put_mtd_device() p…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
In the Linux kernel, the following vulnerability has been resolved:
mtd: core: call _get_device() with the master MTD
__get_mtd_device() calls the master's _get_device() callback with mtd, which may be a partition. __put_mtd_device() passes the master.
This breaks gluebi partitions because gluebi_get_device() uses container_of() and therefore requires the master MTD. Pass the master to _get_device(), matching _put_device().
Linux >= 46b5889cc2c54bac7d7e727a44d28a298df23cef < 95c8f36293c22d450c371167ad4f9a5bbadc7539Linux >= 46b5889cc2c54bac7d7e727a44d28a298df23cef < f971f1c63cf71579258360a12bd185bc1cd1a043Linux >= 46b5889cc2c54bac7d7e727a44d28a298df23cef < dc482a281a19a7d7e91ad1b2d551bb301c54d0e6Linux >= 46b5889cc2c54bac7d7e727a44d28a298df23cef < 12b31d1acd20b3185bb5f0748db0cf6874c8e9d1Linux 5.7Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-98768Noneusb: typec: anx7411 - stop the IRQ before destroying the workqueue
CVE-2026-98770Noneusb: gadget: midi2: Fix the jack descriptor array sizes
CVE-2026-98769Noneusb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd
CVE-2026-98774Nonerust_binder: cancel deferred work items in thread exit
CVE-2026-98772NoneUSB: serial: fix port tear down use-after-free
CVE-2026-98771Noneusb: storage: sierra_ms: reject short SWoC info transfers