7.8

CVE-2026-89441

mmc: via-sdmmc: cancel card-detect work on remove

In the Linux kernel, the following vulnerability has been resolved:

mmc: via-sdmmc: cancel card-detect work on remove

Disabling the device interrupt and freeing the IRQ prevents new card-detect
work from being queued, but carddet_work already queued by the handler can
still run after via_sd_remove() returns. via_sdc_card_detect() recovers the
host through container_of() and dereferences its MMIO base; once remove()
returns the host can be freed, so that work would touch freed memory.

Cancel carddet_work after freeing the IRQ and before cancelling
finish_bh_work, which the card-detect handler can also queue. carddet_work
can re-enable the interrupt through via_reset_pcictrl(); mask it again
afterwards.

This issue was found by an in-house static analysis tool and confirmed by
manual code review.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version f0bf7f61b8405224bc52fc9a3ccd167a68126e00
Version < 0a3c70191868fb007c03ff79693ad4e4b3fdcbb8
Status affected
Version f0bf7f61b8405224bc52fc9a3ccd167a68126e00
Version < f7ff3027ef004a331ef911a4886f12bc2e996037
Status affected
Version f0bf7f61b8405224bc52fc9a3ccd167a68126e00
Version < eaca730c6f5e3609df62a0469fb789235a93d276
Status affected
Version f0bf7f61b8405224bc52fc9a3ccd167a68126e00
Version < 57e5d877f898d5e5c9d672a77bb6bdd24f0d9bf5
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 2.6.31
Status affected
Version 0
Version < 2.6.31
Status unaffected
Version <= 6.12.*
Version 6.12.112
Status unaffected
Version <= 6.18.*
Version 6.18.50
Status unaffected
Version <= 7.2.*
Version 7.2.4
Status unaffected
Version <= *
Version 7.3-rc1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.13% 0.027
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/f7ff3027ef004a331ef911a4886f12bc2e996037
https://git.kernel.org/stable/c/eaca730c6f5e3609df62a0469fb789235a93d276
https://git.kernel.org/stable/c/57e5d877f898d5e5c9d672a77bb6bdd24f0d9bf5
https://git.kernel.org/stable/c/0a3c70191868fb007c03ff79693ad4e4b3fdcbb8