CVE-2026-93049

CVE CVE-2026-93049EUVD EUVD-2026-82159Published 2026-09-17T16:10:39.000Z

What the advisory describes

In the Linux kernel, the following vulnerability has been resolved: mtd: mtdswap: Avoid freeing registered blktrans device twice In mtdswap_add_mtd(), debugfs setup failure after successful blktrans registration can free mbd_dev twice. add_mtd_blktrans_dev() initializes the blktrans device reference and publishes the disk. Once that succeeds, del_mtd_blktrans_dev() tears the disk down and drops the blktrans reference; when that reference reaches zero, blktrans_dev_release() frees the mtd_blktrans_dev. The debugfs failure path called del_mtd_blktrans_dev(mbd_dev), then fell through the common cleanup label and called kfree(mbd_dev) again. Clear the local pointer after deregistration so the common cleanup can still release the mtdswap state without freeing the blktrans object twice. This issue was found by a static analysis checker and confirmed by manual source review.

Source: EUVD (ENISA), in the words of the advisory.

Products the advisory names

These come from the advisory itself, not from any check we performed.

Linux — Linux e8e3edb95ce6a146bc774b6cfad3553f4383edc8 <ecadb9137aeaa0615183f8d23eabea2b45c862f1; e8e3edb95ce6a146bc774b6cfad3553f4383edc8 <5c349c533e72af2313c3be0f80a24d7407fa4777; patch: 7.2.6; patch: 5.15.221; e8e3edb95ce6a146bc774b6cfad3553f4383edc8 <37be7bc2c2d09c18e939da20224405864a0090b9; 4.14; e8e3edb95ce6a146bc774b6cfad3553f4383edc8 <0ce48c6ddea1a8e675a2eb0221b62a9950788f3c; patch: 6.18.52; patch: 6.6.157; e8e3edb95ce6a146bc774b6cfad3553f4383edc8 <eec130fc9ffbbd08a5d5432683122b79aca2a726; e8e3edb95ce6a146bc774b6cfad3553f4383edc8 <779aa4c66a96bf43d2d62982ea1a9096a9128d87; patch: 5.10.270; e8e3edb95ce6a146bc774b6cfad3553f4383edc8 <d5086911d532b82ca070d944aa08ddde00baefe4; patch: 7.3-rc1; patch: 6.12.110; patch: 6.1.188; e8e3edb95ce6a146bc774b6cfad3553f4383edc8 <a82d93fcfdfd26af17049c34319dfdd079cd1901; patch: 0

The versions shown are the advisory's own. Patchlage compares no version numbers and derives no judgement from them — which version is installed is something a person has to look up.

Carried in the product catalogue

An estate covering these products can be recorded in Patchlage. An advisory about them appears in the next morning's situation report.

Linux — Linux

Does this concern one of your customers?

This page cannot answer that — it does not know your estate. Whoever has recorded their environments gets the answer the morning after publication, together with a paragraph they can forward to the customer unedited.

Try it for 28 days

Patchlage reports hits and suspected hits. About everything else this system says nothing — neither this page nor the situation report ever claims that an estate is safe.