CVE-2026-89440

A flaw was found in the Linux kernel's mmc: via-sdmmc component. During the probe process, if the mmcaddhost function fails, the SD card-detect interrupt handler continues to operate on memory that has already been released. This can lead to memory corruption, potentially allowing a local attacke...

CVE-2026-89440

In the Linux kernel, the following vulnerability has been resolved: mmc: via-sdmmc: stop card-detect handling on probe failure requestirq registers the SD card-detect interrupt and the probe enables it before mmcaddhost runs. If mmcaddhost fails, the error path only unmaps the registers and...

CVE-2026-89441

In the Linux kernel, the following vulnerability has been resolved: mmc: via-sdmmc: cancel card-detect work on remove Disabling the device interrupt and freeing the IRQ prevents new card-detect work from being queued, but carddetwork already queued by the handler can still run after viasdremove...

CVE-2026-89441 mmc: via-sdmmc: cancel card-detect work on remove

In the Linux kernel, the following vulnerability has been resolved: mmc: via-sdmmc: cancel card-detect work on remove Disabling the device interrupt and freeing the IRQ prevents new card-detect work from being queued, but carddetwork already queued by the handler can still run after viasdremove...

EUVD-2026-76347

In the Linux kernel, the following vulnerability has been resolved: mmc: via-sdmmc: cancel card-detect work on remove Disabling the device interrupt and freeing the IRQ prevents new card-detect work from being queued, but carddetwork already queued by the handler can still run after viasdremove...

CVE-2026-89441

CVE-2026-89441 affects the Linux kernel mmc: via-sdmmc driver with a use-after-free vulnerability. When the device is removed, disabling the interrupt and freeing the IRQ prevents new card-detect work from being queued, but carddet_work already queued by the handler can still run after via_sd_rem...

CVE-2026-89440 mmc: via-sdmmc: stop card-detect handling on probe failure

In the Linux kernel, the following vulnerability has been resolved: mmc: via-sdmmc: stop card-detect handling on probe failure requestirq registers the SD card-detect interrupt and the probe enables it before mmcaddhost runs. If mmcaddhost fails, the error path only unmaps the registers and...

CVE-2026-89440

CVE-2026-89440 is a use-after-free vulnerability in the Linux kernel's via-sdmmc MMC driver. During device probe, the SD card-detect interrupt is registered before mmc_add_host() runs. If that call fails, the error path only unmaps registers and returns, leaving the interrupt registered. The hand...

PT-2026-90156

In the Linux kernel, the following vulnerability has been resolved: mmc: via-sdmmc: stop card-detect handling on probe failure request irq registers the SD card-detect interrupt and the probe enables it before mmc add host runs. If mmc add host fails, the error path only unmaps the registers and...

PT-2026-90157

In the Linux kernel, the following vulnerability has been resolved: mmc: via-sdmmc: cancel card-detect work on remove Disabling the device interrupt and freeing the IRQ prevents new card-detect work from being queued, but carddet work already queued by the handler can still run after via sd remov...