CVE-2026-98833 json
mtd: core: call _get_device() with the master MTD
published 2026-10-18 22 d ago modified 2026-10-30 10 d ago also EUVD-2026-103773
- cvss
- —
- not scored
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.2%
- EPSS 0.2% chance of exploitation in 30 days, percentile 6%
- public exploits
- 0
- none known
Summary
In the Linux kernel, the following vulnerability has been resolved:
mtd: core: call _get_device() with the master MTD
__get_mtd_device() calls the master's _get_device() callback with mtd, which may be a partition. __put_mtd_device() passes the master.
This breaks gluebi partitions because gluebi_get_device() uses container_of() and therefore requires the master MTD. Pass the master to _get_device(), matching _put_device().
Patch / fix
- Linux Linux 5.15.224, 6.1.191, 6.6.160, 6.12.113, 6.18.56, 7.2.10, 7.3
- linux Debian 13 6.12.113-1
- linux Debian 14 7.2.10-1
- linux-6.12 Debian 12 6.12.113-1~deb12u1
debian advisories DEBIAN-CVE-2026-98833
- kernel Azure Linux 3.0 6.6.161.1-1
azure linux advisories AZL-108842
Azure Linux vulnerability data, Copyright (c) Microsoft Corporation, from https://github.com/microsoft/AzureLinuxVulnerabilityData via OSV, under the MIT licence; changed: normalised to fixed package versions per release. MIT
- git.kernel.org/stable/c/522e821e41654eb06d2f21ac78a0f22fb6b198c2 commit
- git.kernel.org/stable/c/e7e37358408b0690c367cf38aec81a9b7e2475b5 commit
- git.kernel.org/stable/c/d94731cafa57e2c986ff391122d1494e5a3f3c3f commit
- git.kernel.org/stable/c/95c8f36293c22d450c371167ad4f9a5bbadc7539 commit
- git.kernel.org/stable/c/f971f1c63cf71579258360a12bd185bc1cd1a043 commit
- git.kernel.org/stable/c/dc482a281a19a7d7e91ad1b2d551bb301c54d0e6 commit
- git.kernel.org/stable/c/12b31d1acd20b3185bb5f0748db0cf6874c8e9d1 commit
Vendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
red hat product security vex CVE-2026-98833 updated cvss 5.5
kernel: mtd: core: call _get_device() with the master MTD
-
Red Hat Enterprise Linux 6 perf, kernel, python-perf, kernel-kdump, kernel-firmware, kernel-bootwrapper, +1 moreaffected: no fix planned “Out of support scope”
-
Red Hat Enterprise Linux 9 rv, perf, rtla, kernel, bpftool, libperf, +83 more Red Hat Enterprise Linux 10 kernel Red Hat OpenShift Container Platform 4 openshift/ose-rhel-coreos-9 Red Hat OpenShift Container Platform 5 openshift/ose-rhel-coreos-9affected: no fix available “Fix deferred”
-
Red Hat Enterprise Linux 7 perf, kernel, bpftool, kernel-rt, python-perf, kernel-kdump, +8 more Red Hat Enterprise Linux 8 perf, kernel, bpftool, kernel-rt, kernel-core, kernel-tools, +29 more Red Hat OpenShift Container Platform 4 openshift/ose-rhel-coreos-8not affected: vulnerable code not present
Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf
Exploit prediction
0.17% chance of exploitation in the next 30 days, higher than 6% of all scored CVEs (FIRST EPSS, 2026-11-08).
Affected products
- Linux Linux
Classification
- Technology feeds
References
- git.kernel.org /stable/c/522e821e41654eb06d2f21ac78a0f22fb6b198c2
- git.kernel.org /stable/c/e7e37358408b0690c367cf38aec81a9b7e2475b5
- git.kernel.org /stable/c/d94731cafa57e2c986ff391122d1494e5a3f3c3f
- git.kernel.org /stable/c/95c8f36293c22d450c371167ad4f9a5bbadc7539
- git.kernel.org /stable/c/f971f1c63cf71579258360a12bd185bc1cd1a043
- git.kernel.org /stable/c/dc482a281a19a7d7e91ad1b2d551bb301c54d0e6
- git.kernel.org /stable/c/12b31d1acd20b3185bb5f0748db0cf6874c8e9d1
Sources
- CVE List CVE-2026-98833
- NVD CVE-2026-98833
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.