CVE-2026-99038 memstick: rtsx_usb_ms: complete requests after eject instead of dropping them

In the Linux kernel, the following vulnerability has been resolved: memstick: rtsxusbms: complete requests after eject instead of dropping them memstickcheck can pass its host-removing check just before rtsxusbmsdrvremove sets eject/removing. Its next request is then silently dropped:...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 3.16. It arises because memstickcheck checks before setting eject/removing; subsequent requests are silently discarded without any action being taken, causing the removal process to hang and blocking the work queue...