CVE-2026-90268

A flaw was found in the Linux kernel's SCSI disk sd driver. Improper error handling during the probing of a SCSI device, specifically after a large pool creation failure, can lead to a situation where an already registered device is freed and a system file system sysfs entry is leaked. This...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerability has been resolved: mmc: uniphier-sd: A resource leak has been fixed in the remove function. A call to tmiommchostfree is missing from the remove function, in order to balance a call to tmiommchostalloc in the probe. This is done in the error handli...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098842)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098842 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: sd: fix missing putdisk when deviceadd&diskdev fails If deviceadd&sdkp-diskdev fails,...

AZL-88782 CVE-2026-45997 affecting package kernel for versions less than 6.6.141.1-1

In the Linux kernel, the following vulnerability has been resolved: scsi: sd: fix missing putdisk when deviceadd&diskdev fails If deviceadd&sdkp-diskdev fails, putdevice runs scsidiskrelease, which frees the scsidisk but leaves the gendisk referenced. The deviceadddisk error path in sdprobe calls...

CVE-2026-45997 scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails

In the Linux kernel, the following vulnerability has been resolved: scsi: sd: fix missing putdisk when deviceadd&diskdev fails If deviceadd&sdkp-diskdev fails, putdevice runs scsidiskrelease, which frees the scsidisk but leaves the gendisk referenced. The deviceadddisk error path in sdprobe calls...

CVE-2026-45997 scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails

In the Linux kernel, the following vulnerability has been resolved: scsi: sd: fix missing putdisk when deviceadd&diskdev fails If deviceadd&sdkp-diskdev fails, putdevice runs scsidiskrelease, which frees the scsidisk but leaves the gendisk referenced. The deviceadddisk error path in sdprobe calls...

CVE-2025-38401

In the Linux kernel, the following vulnerability has been resolved: mtk-sd: Prevent memory corruption from DMA map failure If msdcpreparedata fails to map the DMA region, the request is not prepared for data receiving, but msdcstartdata proceeds the DMA with previous setting. Since this will lead...

AZL-73022 CVE-2025-38401 affecting package kernel for versions less than 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: mtk-sd: Prevent memory corruption from DMA map failure If msdcpreparedata fails to map the DMA region, the request is not prepared for data receiving, but msdcstartdata proceeds the DMA with previous setting. Since this will lead...

davinci_mmcsd_driver DoS

The vulnerability in the structure of davincimmcsddriver in the drivers/mmc/host/davincimmc.c file of the MMC/SD driver for the Linux operating system is related to a memory leak caused by the incorrect use of a function for releasing resources. Exploiting this vulnerability could allow an attack...

SUSE CVE-2021-46962

In the Linux kernel, the following vulnerability has been resolved: mmc: uniphier-sd: Fix a resource leak in the remove function A 'tmiommchostfree' call is missing in the remove function, in order to balance a 'tmiommchostalloc' call in the probe. This is done in the error handling path of the...

CVE-2021-46962

In the Linux kernel, the following vulnerability has been resolved: mmc: uniphier-sd: Fix a resource leak in the remove function A 'tmiommchostfree' call is missing in the remove function, in order to balance a 'tmiommchostalloc' call in the probe. This is done in the error handling path of the...

CVE-2020-8323

A potential vulnerability in the SMI callback function used in the Legacy SD driver in some Lenovo ThinkPad, ThinkStation, and Lenovo Notebook models may allow arbitrary code execution...

CVE-2020-8323

The CVE-2020-8323 issue affects Lenovo systems (ThinkPad/ThinkStation/Lenovo Notebook) via a vulnerability in the SMI callback function used by the Legacy SD driver. The underlying flaw could allow arbitrary code execution on affected devices. Public details identify the vulnerable component as t...

CVE-2020-8323: Undefined Security Weakness

A potential vulnerability in the SMI callback function used in the Legacy SD driver in some Lenovo ThinkPad, ThinkStation, and Lenovo Notebook models may allow arbitrary code execution...

PT-2020-20090

Name of the Vulnerable Software and Affected Versions Lenovo ThinkPad, ThinkStation, and Lenovo Notebook models affected versions not specified Description A potential issue in the SMI callback function used in the Legacy SD driver may allow arbitrary code execution. This could potentially impact...

Android Privilege Escalation

The vulnerability of the MediaTek misc-sd driver for the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges through a specially created application...

CVE-2015-6637

The CVE-2015-6637 issue is an elevation of privilege in the MediaTek misc-sd kernel driver used by Android prior to 5.1.1 LMY49F and 6.0 prior to 2016-01-01. A crafted application could exploit the driver to execute code with kernel privileges. Public sources describe it as a local privilege esca...

PT-2016-1011

Name of the Vulnerable Software and Affected Versions Android versions prior to 5.1.1 LMY49F Android versions prior to 6.0 2016-01-01 Description The issue is related to the MediaTek misc-sd driver in Android, which has inadequate access control. This allows attackers to gain privileges via a...

CVE-2015-6637: Undefined Security Weakness

The MediaTek misc-sd driver in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to gain privileges via a crafted application, aka internal bug 25307013...