CVE-2026-98211

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-98211

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98211.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-98211

Downstream

Published

2026-10-06T08:44:47Z

Modified

2026-10-08T02:52:53Z

Summary

mmc: mmci: Fix use-after-free in busy-timeout work

Details

In the Linux kernel, the following vulnerability has been resolved:

mmc: mmci: Fix use-after-free in busy-timeout work

ux500_busy_complete() can queue ux500_busy_timeout_work for an R1b command, but mmci_remove() never cancels it. The work can subsequently dereference the devm-allocated mmci_host after it has been released.

Mask the controller interrupts and disable the delayed work during removal. This drains any queued instance and stops an IRQ handler that is still in progress from queueing the work again once it has been disabled.

This issue was found by an in-house static analysis tool.

Database specific

{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98211.json"
}

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

b1a665932dc23cad0b8af2745cd9713f9e930d63

Fixed

af6fbf72e899932f330c4e5d0b84d985c922c633

Fixed

7fecf79f31568de161be14911db10d1251617b01

Fixed

432b98c1f5daecf04a33c8e1688d26e7ac221e23

Fixed

2b19cf3e50cddaff07b657dae1a8f30f06032852

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98211.json"

Linux / Kernel

Package

Name: Kernel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

6.5.0

Fixed

6.12.112

Type: ECOSYSTEM
Events: Introduced

6.13.0

Fixed

6.18.54

Type: ECOSYSTEM
Events: Introduced

6.19.0

Fixed

7.2.8

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98211.json"