All vulnerabilities
CVE-2026-98834

Linux: mtd: core: avoid double-free of OTP NVMEM device

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.15%Chance of exploitation activity in the next 30 days, higher than 4% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in26300879cd8e4612dce66bb8f6ff7cd35fcf3e59Also 5.16, 6.2 and 2 moreCVE List
Published18 Oct 2026Updated 19 Oct 2026CVE List

What fixes it

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

mtd: core: avoid double-free of OTP NVMEM device

If factory OTP setup fails after the user OTP NVMEM device has been registered, mtd_otp_nvmem_add() unregisters the user device but leaves mtd->otp_user_nvmem set. On an error, the caller unregisters it again. For -EOPNOTSUPP, registration continues and normal teardown unregisters it again.

Clear mtd->otp_user_nvmem after unregistering it.

Text from CVE List

Affected versions 14

  • Linuxaffected: e0489f6e221f5ddee6cb3bd51b992b790c5fa4b9 before cecf007418b93a2cbc94269e07fe2fb28f54d8fbCVE List
  • Linuxaffected: e0489f6e221f5ddee6cb3bd51b992b790c5fa4b9 before 26300879cd8e4612dce66bb8f6ff7cd35fcf3e59CVE List
  • Linuxaffected: 6d1af517817a760d7af3dee0fc4603645485495cCVE List
  • Linuxaffected: f1b4affca1e13706ca2eb075bf6775421236d7d1CVE List
  • Linuxaffected: 949476b8601bde5459048eebdf457c9db20addd8CVE List
  • Linuxaffected: dd6c85f98ff33b009b819090268cbf679dc208b9CVE List
  • Linuxaffected: 5.15.111 before 5.16CVE List
  • Linuxaffected: 6.1.28 before 6.2CVE List
  • Linuxaffected: 6.2.15 before 6.3CVE List
  • Linuxaffected: 6.3.2 before 6.4CVE List
  • Linuxaffected: 6.4CVE List
  • Linuxunaffected: all versions before 6.4CVE List
  • Linuxunaffected: 7.2.10 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 2