{"cve":"CVE-2026-93049","nvd":{"published":"2026-09-17T17:17:58.223","modified":"2026-10-19T10:16:54.677","status":"Received","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nmtd: mtdswap: Avoid freeing registered blktrans device twice\n\nIn mtdswap_add_mtd(), debugfs setup failure after successful blktrans\nregistration can free mbd_dev twice.\n\nadd_mtd_blktrans_dev() initializes the blktrans device reference and\npublishes the disk. Once that succeeds, del_mtd_blktrans_dev() tears the\ndisk down and drops the blktrans reference; when that reference reaches\nzero, blktrans_dev_release() frees the mtd_blktrans_dev.\n\nThe debugfs failure path called del_mtd_blktrans_dev(mbd_dev), then fell\nthrough the common cleanup label and called kfree(mbd_dev) again. Clear\nthe local pointer after deregistration so the common cleanup can still\nrelease the mtdswap state without freeing the blktrans object twice.\n\nThis issue was found by a static analysis checker and confirmed by\nmanual source review.","cvss_v4":null,"cvss_v3":null,"cwes":[],"references":["https://git.kernel.org/stable/c/0ce48c6ddea1a8e675a2eb0221b62a9950788f3c","https://git.kernel.org/stable/c/37be7bc2c2d09c18e939da20224405864a0090b9","https://git.kernel.org/stable/c/5c349c533e72af2313c3be0f80a24d7407fa4777","https://git.kernel.org/stable/c/779aa4c66a96bf43d2d62982ea1a9096a9128d87","https://git.kernel.org/stable/c/a82d93fcfdfd26af17049c34319dfdd079cd1901"],"products":[],"source":"nvd","synced_at":"2026-10-19T22:55:23.253742848+00:00"},"epss":{"cve":"CVE-2026-93049","score":0.00216,"percentile":0.1198,"date":"2026-10-25"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}