CVE-2026-68416

A flaw was found in the Linux kernel's Memory Technology Device (MTD) subsystem. When an error occurs during the addition of an MTD device partition, the error handling routines can attempt to free the same memory region twice. This also causes a warning due to the partition node still being linked. A local attacker could exploit this double-free condition to cause a denial of service (DoS) due to memory corruption.

This vulnerability is rated as Moderate severity for Red Hat because exploitation requires local access to trigger partition addition failures and primarily leads to kernel memory corruption or a denial of service. Standard enterprise installations rarely utilize raw Memory Technology Devices, substantially limiting real-world exposure compared to specialized or embedded environments. The flaw cannot be exploited remotely and does not directly grant elevated privileges or confidentiality loss.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.