CVE-2026-98884

A flaw was found in the Linux kernel's MultiMediaCard MMC subsystem. Due to missing input validation, an excessively large segment value configured by a host driver can be truncated to zero during memory allocation. When this occurs, the kernel attempts to access invalid memory, resulting in a...

CVE-2026-98212

A flaw was found in the Linux kernel's MultiMediaCard MMC host software queue. A local user could exploit a use-after-free vulnerability when pending retry operations are not cancelled before device removal, allowing tasks to access memory after it has been released. This issue can lead to a Deni...

CVE-2026-98211

A flaw was found in the Linux kernel's MultiMediaCard MMC host controller interface driver. When the device is removed, the driver fails to cancel pending delayed timeout tasks, allowing scheduled work to access memory that has already been released. A local user capable of triggering device...

CVE-2026-98207

A flaw was found in the Linux kernel's MultiMediaCard Serial Peripheral Interface MMC SPI driver. A local user or connected device can trigger this flaw during multi-block data transfers that encounter a Cyclic Redundancy Check CRC transmission error. The driver initiates a recovery retry without...

CVE-2026-97502

A flaw was found in the Linux kernel's DaVinci MultiMediaCard MMC driver. When processing hardware interrupt events such as read timeouts or communication errors, the driver accesses a data pointer without verifying that an active transfer structure exists. A local user or abnormal device conditi...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an unchecked mmcaddhost return value, which could lead to a memory leak and kernel crash...

Bug in NVIDIA’s Tegra Chipset Opens Door to Malicious Code Execution

A flaw impacting millions of mobile and internet of things IoT devices running NVIDIA’s Tegra processor opens the door for a variety of attacks, including device hijacking or siphoning of data. The warning comes from researcher Triszka Balázs, who discovered the flaw and asserts that the bug...

Google Android MediaTek mmc Driver Elevation of Privilege Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA.MediaTek mmc driver is one of the MediaTek MMC card drivers. An elevation of privilege vulnerability exists in the MediaTek mmc driver in Android. An attacker can exploit this...

CVE-2015-8890

platform/msmshared/partitionparser.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 2013 devices does not validate certain GUID Partition Table GPT data, which allows attackers to bypass intended access restrictions via a crafted MultiMediaCard MMC, aka Android internal...

CVE-2015-8890: Undefined Security Weakness

platform/msmshared/partitionparser.c in the Qualcomm components in Android before 2016-07-05 on Nexus 5 and 7 2013 devices does not validate certain GUID Partition Table GPT data, which allows attackers to bypass intended access restrictions via a crafted MultiMediaCard MMC, aka Android internal...