Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2026-98208

mmc: sdio_uart: fix xmit_fifo leak when the port table is full

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 5.10.271, 5.15.222, 6.1.189, 6.6.158, 6.12.112, and 2 more
None on Exploit-DB, Metasploit or GitHub

Summary

In the Linux kernel, the following vulnerability has been resolved: mmc: sdio_uart: fix xmit_fifo leak when the port table is full sdio_uart_add_port() allocates the transmit fifo before claiming a slot in sdio_uart_table[]. When all UART_NR slots are taken, it returns -EBUSY with the fifo still allocated, but the probe error path only kfree()s the port, leaking the transmit fifo. Free the fifo in the failure path of sdio_uart_add_port() itself so the function retains nothing on error.

Timeline

  1. CVE published
  2. Record last updated

Affected versions

  • Linux Linux

    From 8b197a5ce7a7218bb9fc721647ba0d5734f27348 · fixed in 9e992d59138fcfaa4bad7cc0750265b0a8bca100; From 8b197a5ce7a7218bb9fc721647ba0d5734f27348 · fixed in b97b5b66c93cb4aaf6358727a73fff880a774dfd; From 8b197a5ce7a7218bb9fc721647ba0d5734f27348 · fixed in 8a2c1bf209ba04cbd14153a771724bd5aa522fcd; From 8b197a5ce7a7218bb9fc721647ba0d5734f27348 · fixed in 72f4c2b7a48423c708f2c348585419a1b71ab04c; From 8b197a5ce7a7218bb9fc721647ba0d5734f27348 · fixed in fd8223c53ad9553b2a349d2a40e19bbc6e60fc48; From 8b197a5ce7a7218bb9fc721647ba0d5734f27348 · fixed in ac866db277a4c73e84b4263773652e3aba326249; From 8b197a5ce7a7218bb9fc721647ba0d5734f27348 · fixed in 5e142adbbdc54afbd01fad476c91cded41d22594; From 8b197a5ce7a7218bb9fc721647ba0d5734f27348 · fixed in 53823e25793a97d07e6e98e0904bbf74cac8bc76

  • Linux Linux

    2.6.34

  • KernelLinux

    From 2.6.34 · fixed in 5.10.271; From 5.11.0 · fixed in 5.15.222; From 5.16.0 · fixed in 6.1.189; From 6.2.0 · fixed in 6.6.158; From 6.7.0 · fixed in 6.12.112; From 6.13.0 · fixed in 6.18.54; From 6.19.0 · fixed in 7.2.8

References 8

git.kernel.org