CVE-2026-99039

A slab-use-after-free vulnerability exists in the Linux kernel memstick subsystem within the memstick_alloc_card() and memstick_set_rw_addr() functions. The issue arises because the subsystem uses wait_for_completion_timeout() without a cancellation callback for in-flight requests. If the timeout...

EUVD-2026-108834

In the Linux kernel, the following vulnerability has been resolved: memstick: core: wait for request completion before freeing card In memstickalloccard and memsticksetrwaddr, waitforcompletiontimeout is used to wait for device identification and address configuration requests to complete. The...