Connect your agent
AdvisoriesCriticalCheck your lockfilePluginHow it worksPricing Connect your agent

CVE record · CVE-2026-89953

mtd: mtdoops: free page bitmap when the backing MTD is removed

No CVSS scoreEPSS 0.0022 · 12th percentile

Published by the CVE Program (CNA: Linux) at 16 Sept 2026, 10:32 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
VendorProductVersions
Linux Linux
  • affected be95745f01677245a061a8f51473ef5ec8ad008e to before 477d61d54e097e90f748aa18d013805abd56bcbd git
  • affected be95745f01677245a061a8f51473ef5ec8ad008e to before a91ac71e67c3e01ed9afd9841435bebb930293f8 git
  • affected be95745f01677245a061a8f51473ef5ec8ad008e to before 698944132083d143ef965c0090ee14ba1d9e1a5f git
  • affected be95745f01677245a061a8f51473ef5ec8ad008e to before f25c804947e0a28c15e73da8e2e0db959cbed716 git
  • affected be95745f01677245a061a8f51473ef5ec8ad008e to before 8414f0e9f707226de20b48c7048179fd86d352fc git
  • affected be95745f01677245a061a8f51473ef5ec8ad008e to before d06f91a52af11630c9f7e487f6daf242ac310cb8 git
  • affected be95745f01677245a061a8f51473ef5ec8ad008e to before 1e5cd8bc902331ff801df88cbb299029ae062753 git
  • affected be95745f01677245a061a8f51473ef5ec8ad008e to before 956e7da12c114f13c63d126ab1d79c3b6a819060 git
Other versions: unaffected
Linux Linux
  • affected 2.6.33
  • unaffected before 2.6.33 semver
  • unaffected 5.10.270 to 5.10.*, inclusive semver
  • unaffected 5.15.221 to 5.15.*, inclusive semver
  • unaffected 6.1.188 to 6.1.*, inclusive semver
  • unaffected 6.6.157 to 6.6.*, inclusive semver
  • unaffected 6.12.110 to 6.12.*, inclusive semver
  • unaffected 6.18.51 to 6.18.*, inclusive semver
  • unaffected 7.2.5 to 7.2.*, inclusive semver
  • unaffected 7.3 to *, inclusive original_commit_for_fix
Other versions: affected
Identifiers
CVE-2026-89953
CNA
Linux
Tags
Published
16 Sept 2026
Updated
19 Oct 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

No source has published a CVSS score for this record yet.

  • CISA KEV Not listed.
  • EPSS 0.0022, the 12th percentile, on 13 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 16 Sept 2026. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.