{"id":"CVE-2026-80597","state":"PUBLISHED","title":"mtd: maps: vmu-flash: fix NULL pointer dereference in initialization","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nmtd: maps: vmu-flash: fix NULL pointer dereference in initialization\n\nThe mtd_info contains a struct device, which must be linked to its\nparent. Without this, the initialization of the MTD fails with a NULL\npointer dereference.","publishedAt":"2026-08-28T06:48:23.499Z","updatedAt":"2026-08-28T06:48:23.499Z","severity":null,"assigner":"Linux","products":["Linux Linux"],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"47a72688fae7298e1ad5fdc9bff7e04b6a549620","status":"affected","lessThan":"ff6453502c722437e37238900c9e45a1fec34455","versionType":"git"},{"version":"47a72688fae7298e1ad5fdc9bff7e04b6a549620","status":"affected","lessThan":"c60a627edbbd66bfbb0a0f564e64084c23c7ce98","versionType":"git"},{"version":"47a72688fae7298e1ad5fdc9bff7e04b6a549620","status":"affected","lessThan":"0db62da830ec57ad3efe24337763c8bf5442c6be","versionType":"git"},{"version":"47a72688fae7298e1ad5fdc9bff7e04b6a549620","status":"affected","lessThan":"44c6abf5d823de796319d6e23c282ed5b68dc41b","versionType":"git"},{"version":"47a72688fae7298e1ad5fdc9bff7e04b6a549620","status":"affected","lessThan":"b80a7b8f1a10e9270160b9d33f1253da2195c827","versionType":"git"},{"version":"47a72688fae7298e1ad5fdc9bff7e04b6a549620","status":"affected","lessThan":"9ac007affa77c3dc3def53760e3d69c350fc9967","versionType":"git"},{"version":"47a72688fae7298e1ad5fdc9bff7e04b6a549620","status":"affected","lessThan":"f4599793240dd60a0a708ef1fe116223f47aa105","versionType":"git"},{"version":"47a72688fae7298e1ad5fdc9bff7e04b6a549620","status":"affected","lessThan":"357e3b8e3a8769ba36eb8ec5e053e4825f1a9329","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/mtd/maps/vmu-flash.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"2.6.30","status":"affected"},{"version":"0","status":"unaffected","lessThan":"2.6.30","versionType":"semver"},{"version":"5.10.261","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.212","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.178","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.145","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.12.97","status":"unaffected","lessThanOrEqual":"6.12.*","versionType":"semver"},{"version":"6.18.40","status":"unaffected","lessThanOrEqual":"6.18.*","versionType":"semver"},{"version":"7.1.5","status":"unaffected","lessThanOrEqual":"7.1.*","versionType":"semver"},{"version":"7.2","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/mtd/maps/vmu-flash.c"]}],"references":["https://git.kernel.org/stable/c/ff6453502c722437e37238900c9e45a1fec34455","https://git.kernel.org/stable/c/c60a627edbbd66bfbb0a0f564e64084c23c7ce98","https://git.kernel.org/stable/c/0db62da830ec57ad3efe24337763c8bf5442c6be","https://git.kernel.org/stable/c/44c6abf5d823de796319d6e23c282ed5b68dc41b","https://git.kernel.org/stable/c/b80a7b8f1a10e9270160b9d33f1253da2195c827","https://git.kernel.org/stable/c/9ac007affa77c3dc3def53760e3d69c350fc9967","https://git.kernel.org/stable/c/f4599793240dd60a0a708ef1fe116223f47aa105","https://git.kernel.org/stable/c/357e3b8e3a8769ba36eb8ec5e053e4825f1a9329"],"weaknesses":[],"ingestedAt":"2026-10-29T20:13:07.220Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/80xxx/CVE-2026-80597.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-80597","state":"PUBLISHED","datePublished":"2026-08-28T06:48:23.499Z","dateUpdated":"2026-08-28T06:48:23.499Z","assignerShortName":"Linux","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateReserved":"2026-08-26T14:34:25.771Z"},"containers":{"cna":{"title":"mtd: maps: vmu-flash: fix NULL pointer dereference in initialization","descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nmtd: maps: vmu-flash: fix NULL pointer dereference in initialization\n\nThe mtd_info contains a struct device, which must be linked to its\nparent. Without this, the initialization of the MTD fails with a NULL\npointer dereference."}],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"47a72688fae7298e1ad5fdc9bff7e04b6a549620","status":"affected","lessThan":"ff6453502c722437e37238900c9e45a1fec34455","versionType":"git"},{"version":"47a72688fae7298e1ad5fdc9bff7e04b6a549620","status":"affected","lessThan":"c60a627edbbd66bfbb0a0f564e64084c23c7ce98","versionType":"git"},{"version":"47a72688fae7298e1ad5fdc9bff7e04b6a549620","status":"affected","lessThan":"0db62da830ec57ad3efe24337763c8bf5442c6be","versionType":"git"},{"version":"47a72688fae7298e1ad5fdc9bff7e04b6a549620","status":"affected","lessThan":"44c6abf5d823de796319d6e23c282ed5b68dc41b","versionType":"git"},{"version":"47a72688fae7298e1ad5fdc9bff7e04b6a549620","status":"affected","lessThan":"b80a7b8f1a10e9270160b9d33f1253da2195c827","versionType":"git"},{"version":"47a72688fae7298e1ad5fdc9bff7e04b6a549620","status":"affected","lessThan":"9ac007affa77c3dc3def53760e3d69c350fc9967","versionType":"git"},{"version":"47a72688fae7298e1ad5fdc9bff7e04b6a549620","status":"affected","lessThan":"f4599793240dd60a0a708ef1fe116223f47aa105","versionType":"git"},{"version":"47a72688fae7298e1ad5fdc9bff7e04b6a549620","status":"affected","lessThan":"357e3b8e3a8769ba36eb8ec5e053e4825f1a9329","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/mtd/maps/vmu-flash.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"2.6.30","status":"affected"},{"version":"0","status":"unaffected","lessThan":"2.6.30","versionType":"semver"},{"version":"5.10.261","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.212","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.178","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.145","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.12.97","status":"unaffected","lessThanOrEqual":"6.12.*","versionType":"semver"},{"version":"6.18.40","status":"unaffected","lessThanOrEqual":"6.18.*","versionType":"semver"},{"version":"7.1.5","status":"unaffected","lessThanOrEqual":"7.1.*","versionType":"semver"},{"version":"7.2","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/mtd/maps/vmu-flash.c"]}],"references":[{"url":"https://git.kernel.org/stable/c/ff6453502c722437e37238900c9e45a1fec34455"},{"url":"https://git.kernel.org/stable/c/c60a627edbbd66bfbb0a0f564e64084c23c7ce98"},{"url":"https://git.kernel.org/stable/c/0db62da830ec57ad3efe24337763c8bf5442c6be"},{"url":"https://git.kernel.org/stable/c/44c6abf5d823de796319d6e23c282ed5b68dc41b"},{"url":"https://git.kernel.org/stable/c/b80a7b8f1a10e9270160b9d33f1253da2195c827"},{"url":"https://git.kernel.org/stable/c/9ac007affa77c3dc3def53760e3d69c350fc9967"},{"url":"https://git.kernel.org/stable/c/f4599793240dd60a0a708ef1fe116223f47aa105"},{"url":"https://git.kernel.org/stable/c/357e3b8e3a8769ba36eb8ec5e053e4825f1a9329"}],"providerMetadata":{"shortName":"Linux","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateUpdated":"2026-08-28T06:48:23.499Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.30","versionEndExcluding":"5.10.261"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.30","versionEndExcluding":"5.15.212"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.30","versionEndExcluding":"6.1.178"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.30","versionEndExcluding":"6.6.145"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.30","versionEndExcluding":"6.12.97"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.30","versionEndExcluding":"6.18.40"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.30","versionEndExcluding":"7.1.5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.30","versionEndExcluding":"7.2"}]}]}],"x_generator":{"engine":"bippy-1.2.0"}}}}}