-

CVE-2026-98213

mmc: core: Cancel SDIO IRQ work before freeing host

In the Linux kernel, the following vulnerability has been resolved:

mmc: core: Cancel SDIO IRQ work before freeing host

A host controller that uses sdio_signal_irq() schedules host->sdio_irq_work
from its interrupt handler.  That work is only cancelled on the suspend
path (mmc_sdio_suspend()), not on the remove/free path, so a worker armed
just before the controller freed its IRQ can run after
mmc_host_classdev_release() has freed the host and dereference it through
container_of().

Cancel host->sdio_irq_work in mmc_free_host(), like the existing
host->detect drain added by commit 1036f69e2513 ("mmc: core: Cancel
delayed work before releasing host").

This issue was found by an in-house static analysis tool.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 682696605c7093d2800c498c04166831e5aedf87
Version < bae1cf4f9902b2065bd78b759c7fe6312855f05e
Status affected
Version 682696605c7093d2800c498c04166831e5aedf87
Version < 0bf3d168a2cc20b120d6b50f0a8ac5b40ff4d589
Status affected
Version 682696605c7093d2800c498c04166831e5aedf87
Version < 1d6e7315ee1c992b4ca42c9b11c5ed0e925a00e0
Status affected
Version 682696605c7093d2800c498c04166831e5aedf87
Version < 4553b5004eca9c9eae29a421f1a9c4d5db2c9114
Status affected
Version 682696605c7093d2800c498c04166831e5aedf87
Version < 2a863458828ade0671c2bc2e469bbd7f2340eb03
Status affected
Version 682696605c7093d2800c498c04166831e5aedf87
Version < 6feadbecdae60a6324c967f3b1493741083793a3
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 4.13
Status affected
Version 0
Version < 4.13
Status unaffected
Version <= 6.1.*
Version 6.1.189
Status unaffected
Version <= 6.6.*
Version 6.6.158
Status unaffected
Version <= 6.12.*
Version 6.12.112
Status unaffected
Version <= 6.18.*
Version 6.18.54
Status unaffected
Version <= 7.2.*
Version 7.2.8
Status unaffected
Version <= *
Version 7.3-rc4
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.22% 0.108
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/bae1cf4f9902b2065bd78b759c7fe6312855f05e
https://git.kernel.org/stable/c/0bf3d168a2cc20b120d6b50f0a8ac5b40ff4d589
https://git.kernel.org/stable/c/1d6e7315ee1c992b4ca42c9b11c5ed0e925a00e0
https://git.kernel.org/stable/c/4553b5004eca9c9eae29a421f1a9c4d5db2c9114
https://git.kernel.org/stable/c/2a863458828ade0671c2bc2e469bbd7f2340eb03
https://git.kernel.org/stable/c/6feadbecdae60a6324c967f3b1493741083793a3