Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2026-31651

mmc: vub300: fix NULL-deref on disconnect

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 5.10.253, 5.15.203, 6.1.169, 6.6.135, 6.12.82, and 2 more
None on Exploit-DB, Metasploit or GitHub

Summary

In the Linux kernel, the following vulnerability has been resolved: mmc: vub300: fix NULL-deref on disconnect Make sure to deregister the controller before dropping the reference to the driver data on disconnect to avoid NULL-pointer dereferences or use-after-free.

Timeline

  1. CVE published
  2. Record last updated

Affected versions

  • Linux Linux

    From 88095e7b473a3d9ec3b9c60429576e9cbd327c89 · fixed in 6446516e626ce7c44bdadbcbb3d7677a2c52ce93; From 88095e7b473a3d9ec3b9c60429576e9cbd327c89 · fixed in ba3b9429de94958dc0060d9816a915dd75c34919; From 88095e7b473a3d9ec3b9c60429576e9cbd327c89 · fixed in 517b58e1d067115f80d198feee10192da4c424d0; From 88095e7b473a3d9ec3b9c60429576e9cbd327c89 · fixed in 6468cab1173f44f7a4b7a05ce8abfdfd1ce1557a; From 88095e7b473a3d9ec3b9c60429576e9cbd327c89 · fixed in 53f2642d77ab5f1f303388bff5500363c6cf962c; From 88095e7b473a3d9ec3b9c60429576e9cbd327c89 · fixed in c83a282615d8f7ba28cebddd54600b419d562d82; From 88095e7b473a3d9ec3b9c60429576e9cbd327c89 · fixed in 8d09e75759cb2afc0732acfb5a14a93c03805a61; From 88095e7b473a3d9ec3b9c60429576e9cbd327c89 · fixed in dff34ef879c5e73298443956a8b391311ba78d57

  • Linux Linux

    3.0

  • KernelLinux

    From 3.0.0 · fixed in 5.10.253; From 5.11.0 · fixed in 5.15.203; From 5.16.0 · fixed in 6.1.169; From 6.2.0 · fixed in 6.6.135; From 6.7.0 · fixed in 6.12.82; From 6.13.0 · fixed in 6.18.23; From 6.19.0 · fixed in 6.19.13

References 8

git.kernel.org