AZL-108842
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-108842.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-108842
- Upstream
- Published
- 2026-10-18T16:17:37Z
- Modified
- 2026-10-19T14:16:49Z
- Summary
- CVE-2026-98833 affecting package kernel 6.6.157.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
mtd: core: call _get_device() with the master MTD
__get_mtd_device() calls the master's _get_device() callback with mtd, which may be a partition. __put_mtd_device() passes the master.
This breaks gluebi partitions because gluebi_get_device() uses container_of() and therefore requires the master MTD. Pass the master to _get_device(), matching _put_device().
- References