CVE-2026-98833

Description

In the Linux kernel, the following vulnerability has been resolved: mtd: core: call _get_device() with the master MTD __get_mtd_device() calls the master's _get_device() callback with mtd, which may be a partition. __put_mtd_device() passes the master. This breaks gluebi partitions because gluebi_get_device() uses container_of() and therefore requires the master MTD. Pass the master to _get_device(), matching _put_device().

Is your site exposed to CVE-2026-98833?

Run a free security scan — no signup, results in seconds.

EPSS — Exploit Prediction

0.0017

Probability of exploitation

0.07%

Percentile rank

EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.

References

Other References

https://git.kernel.org/stable/c/12b31d1acd20b3185bb5f0748db0cf6874c8e9d1 https://git.kernel.org/stable/c/95c8f36293c22d450c371167ad4f9a5bbadc7539 https://git.kernel.org/stable/c/d94731cafa57e2c986ff391122d1494e5a3f3c3f https://git.kernel.org/stable/c/dc482a281a19a7d7e91ad1b2d551bb301c54d0e6 https://git.kernel.org/stable/c/f971f1c63cf71579258360a12bd185bc1cd1a043

Frequently Asked Questions

What is CVE-2026-98833? +

In the Linux kernel, the following vulnerability has been resolved: mtd: core: call _get_device() with the master MTD __get_mtd_device() calls the master's _get_device() callback with mtd, which may be a partition. __put_mtd_device() passes the master. This breaks gluebi partitions because gluebi_get_device() uses container_of() and therefore requires the master MTD. Pass the master to _get_device(), matching _put_device().

How do I check if I'm vulnerable to CVE-2026-98833? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.