CVE-2026-93048

A flaw was found in the Linux kernel's Memory Technology Device (MTD) partition driver. A local user can exploit this by passing a specially crafted offset value, MTDPART_OFS_RETAIN, when adding a partition via the BLKPG ioctl on NAND devices. This improper handling can lead to a kernel warning or the creation of an invalid partition, potentially resulting in a denial of service.

This flaw is rated as Moderate impact because exploitation requires local access with the ability to issue partition-table modification ioctls against flash memory devices, and the resulting failure produces kernel warnings or partition table corruption rather than arbitrary code execution. Typical Red Hat Enterprise Linux and OpenShift deployments run on standard server hardware without attached Memory Technology Device (MTD) or raw NAND storage, substantially limiting practical exposure in production. Systems in specialized or embedded environments that expose dynamic partitioning operations on MTD storage could experience localized service degradation if an unauthorized caller triggers this condition.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.