Live › vulnerability › CVE-2026-98833
Go to dashboardIn the Linux kernel's MTD (flash storage) core, the get-device call passes a partition rather than the master device, which breaks gluebi partitions. The sources do not describe an attacker-reachable impact beyond this functional breakage.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
No product ranges from the sources yet.
Unknown from the sources.
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In the Linux kernel, the following vulnerability has been resolved:
mtd: core: call _get_device() with the master MTD
__get_mtd_device() calls the master's _get_device() callback with mtd, which may be a partition. __put_mtd_device() passes the master.
This breaks gluebi partitions because gluebi_get_device() uses container_of() and therefore requires the master MTD. Pass the master to _get_device(), matching _put_device().
This page as .md · .json · in your agent: get_signal("CVE-2026-98833")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.