[PATCH 1/2] mtd: virt-concat: unlink concat node before freeing it

[Miquel Raynal]

On Fri, 25 Sep 2026 05:55:44 -0700, Harshit Mogalapalli wrote:
> mtd_virt_concat_create_item() links each new mtd_virt_concat_node to
> concat_node_list. mtd_virt_concat_destroy() later frees the node after
> destroying its concatenated MTD device, but fails to unlink it. A later
> list traversal dereferences the freed node, causing a use-after-free.
> 
> Remove the node from concat_node_list before freeing it.
> 
> [...]

Applied to mtd/next, thanks!

[1/2] mtd: virt-concat: unlink concat node before freeing it
      commit: 532caaa2f445b22b74b88b4023a810426772db54
[2/2] mtd: virt-concat: unlink discarded items before freeing
      commit: 112a666bd82e96e4a01e0cd8a0fb9c88dd0bce38

Patche(s) should be available on mtd/linux.git and will be
part of the next PR (provided that no robot complains by then).

Kind regards,
Miquèl