CVE-2026-89953

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak occurs in the mtdoops component of the Linux kernel. The mtdoops notify add() function allocates a page bitmap oops page used during MTD device registration, but the mtdoops notify remove() function fails to free this bitmap when the device is detached. If the same MTD device is registered multiple times while mtdoops remains loaded, a new bitmap is allocated and the previous pointer is overwritten, resulting in a vmalloc allocation leak for each remove/add cycle.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.