CVE-2026-98834

A flaw was found in the Linux kernel's Memory Technology Device (MTD) subsystem. An attacker capable of triggering device registration failures can cause a Denial of Service (DoS) via a kernel crash. During the setup of One-Time Programmable (OTP) non-volatile memory devices, an initialization failure unregisters the device without clearing its internal reference pointer. Subsequent error handling or cleanup routines attempt to release the device a second time, resulting in a double-free condition and system instability.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.