Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-98834

mtd: core: avoid double-free of OTP NVMEM device

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: mtd: core: avoid double-free of OTP NVMEM device If factory OTP setup fails after the user OTP NVMEM device has been registered, mtd_otp_nvmem_add() unregisters the user device but leaves mtd->otp_user_nvmem set. On an error, the caller unregisters it again. For -EOPNOTSUPP, registration continues and normal teardown unregisters it again. Clear mtd->otp_user_nvmem after unregistering it.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • e0489f6e221f5ddee6cb3bd51b992b790c5fa4b9 to < cecf007418b93a2cbc94269e07fe2fb28f54d8fbaffected
  • e0489f6e221f5ddee6cb3bd51b992b790c5fa4b9 to < 26300879cd8e4612dce66bb8f6ff7cd35fcf3e59affected
  • 6d1af517817a760d7af3dee0fc4603645485495caffected
  • f1b4affca1e13706ca2eb075bf6775421236d7d1affected
  • 949476b8601bde5459048eebdf457c9db20addd8affected
  • dd6c85f98ff33b009b819090268cbf679dc208b9affected
  • 5.15.111 to < 5.16affected
  • 6.1.28 to < 6.2affected
  • 6.2.15 to < 6.3affected
  • 6.3.2 to < 6.4affected

Linux Linux

Default version status: affected

  • 6.4affected
  • 0 to < 6.4unaffected
  • 7.2.10 to ≤ 7.2.*unaffected
  • 7.3 to ≤ *unaffected

References