CVE-2026-68423

A flaw was found in the Linux kernel's mtd: virt_concat subsystem. The mtd_virt_concat_destroy() function incorrectly calls mtd_virt_concat_put_mtd_devices() after mtd_concat_destroy() has already freed the associated memory. This use-after-free vulnerability can lead to system instability or potentially enable a local attacker to achieve privilege escalation or arbitrary code execution.

This issue affects virtual MTD concat devices. mtd_virt_concat_destroy() UAF by using freed concat pointer after mtd_concat_destroy(). Systems not using virt_concat MTD are not affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.