In the Linux kernel, the following vulnerability has been resolved: mtd: core: call _get_device() with the master MTD __get_mtd_device() calls the… (CVE-2026-98833)

The vulnerability in the Linux kernel's MTD core arises because __get_mtd_device() calls the master's _get_device() callback with an MTD device that may be a partition rather than the master device. Meanwhile, __put_mtd_device() passes the master device. This mismatch breaks gluebi partitions, as gluebi_get_device() uses container_of() and requires the master MTD device. The resolution involves passing the master MTD device to _get_device(), matching the behavior of _put_device(), thereby correcting the device reference handling.

The flaw could cause improper handling of MTD devices in the kernel, specifically breaking gluebi partitions that depend on correct master MTD references. This could lead to kernel-level malfunctions related to MTD device management. No information about exploitation or broader impact is provided.

A fix has been implemented in the Linux kernel to correctly pass the master MTD device to the _get_device() callback, resolving the issue. Users should apply the official kernel update containing this fix. Patch status is not explicitly stated in the input data, so verify with the Linux kernel vendor advisory for the exact fixed versions and update instructions.