{"id":"CVE-2026-98833","kind":"vulnerability","aliases":["CVE-2026-98833"],"related":[],"title":"Linux kernel: MTD device lookup passes partition instead of master","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nmtd: core: call _get_device() with the master MTD\n\n__get_mtd_device() calls the master's _get_device() callback with mtd,\nwhich may be a partition. __put_mtd_device() passes the master.\n\nThis breaks gluebi partitions because gluebi_get_device() uses\ncontainer_of() and therefore requires the master MTD. Pass the master\nto _get_device(), matching _put_device().","summary":"In the Linux kernel's MTD (flash storage) core, the get-device call passes a partition rather than the master device, which breaks gluebi partitions. The sources do not describe an attacker-reachable impact beyond this functional breakage.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","kernel","linux","mtd"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-10-18T16:17:37+00:00","first_seen_at":"2026-10-23T21:57:17+00:00","triaged_at":"2026-10-25T05:13:17+00:00","updated_at":"2026-10-25T05:13:17+00:00","category":"infrastructure","confidence":0.3,"triage":{"at":"2026-10-25T05:13:17Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"unknown","title":"Linux kernel: MTD device lookup passes partition instead of master","impact":"low","summary":"In the Linux kernel's MTD (flash storage) core, the get-device call passes a partition rather than the master device, which breaks gluebi partitions. The sources do not describe an attacker-reachable impact beyond this functional breakage.","category":"infrastructure","nicknames":[],"who_cares":["linux","kernel","mtd"],"confidence":0.3,"needs_auth":"unknown","worst_case":"unknown; the description only reports broken gluebi partitions","analyst_note":"Check the NVD entry and the kernel stable commit for affected version ranges, the fixed kernel versions, and whether any security impact beyond functional breakage is stated.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000515,"input_tokens":3361,"output_tokens":357,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':12A,15A '-98833':13A,16A 'attack':54B 'attacker-reach':53B 'beyond':57B 'break':44B,104C 'breakag':60B 'call':34B,73C,83C 'callback':89C 'contain':112C 'core':29B,72C 'cve':11A,14A 'describ':51B 'devic':4A,33B,42B,75C,82C,88C,99C,110C,125C,128C 'flash':27B 'follow':66C 'function':59B 'get':32B,74C,80C,87C,109C,124C 'get-devic':31B 'gluebi':45B,105C,108C 'impact':56B 'infrastructur':17B 'instead':8A 'kernel':2A,18B,24B,64C 'linux':1A,19B,23B,63C 'lookup':5A 'master':10A,41B,78C,85C,102C,118C,122C 'match':126C 'may':93C 'mtd':3A,20B,26B,71C,79C,81C,91C,98C,119C 'partit':7A,37B,46B,96C,106C 'pass':6A,35B,100C,120C 'put':97C,127C 'rather':38B 'reachabl':55B 'requir':116C 'resolv':70C 'sourc':48B 'storag':28B 'therefor':115C 'use':111C 'vulner':67C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-18T16:17:37+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-98833","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98833","severity":null,"published_at":"2026-10-18T16:17:37+00:00","modified_at":"2026-10-21T13:21:48+00:00","first_seen_at":"2026-10-23T21:57:17+00:00","fetched_at":"2026-10-23T22:28:56+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}