All vulnerabilities
CVE-2026-98208

Linux: mmc: sdio_uart: fix xmit_fifo leak when the port table is full

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.18%Chance of exploitation activity in the next 30 days, higher than 7% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in9e992d59138fcfaa4bad7cc0750265b0a8bca100Also 8a2c1bf209ba04cbd14153a771724bd5aa522fcd, 72f4c2b7a48423c708f2c348585419a1b71ab04c and 2 moreCVE List
Published6 Oct 2026Updated 19 Oct 2026CVE List

What fixes it

  • 9e992d59138fcfaa4bad7cc0750265b0a8bca100LinuxCVE List
  • 8a2c1bf209ba04cbd14153a771724bd5aa522fcdLinuxCVE List
  • 72f4c2b7a48423c708f2c348585419a1b71ab04cLinuxCVE List
  • 5e142adbbdc54afbd01fad476c91cded41d22594LinuxCVE List
  • 53823e25793a97d07e6e98e0904bbf74cac8bc76LinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

mmc: sdio_uart: fix xmit_fifo leak when the port table is full

sdio_uart_add_port() allocates the transmit fifo before claiming a slot in sdio_uart_table[]. When all UART_NR slots are taken, it returns -EBUSY with the fifo still allocated, but the probe error path only kfree()s the port, leaking the transmit fifo.

Free the fifo in the failure path of sdio_uart_add_port() itself so the function retains nothing on error.

Text from CVE List

Affected versions 18

  • Linuxaffected: 8b197a5ce7a7218bb9fc721647ba0d5734f27348 before 9e992d59138fcfaa4bad7cc0750265b0a8bca100CVE List
  • Linuxaffected: 8b197a5ce7a7218bb9fc721647ba0d5734f27348 before b97b5b66c93cb4aaf6358727a73fff880a774dfdCVE List
  • Linuxaffected: 8b197a5ce7a7218bb9fc721647ba0d5734f27348 before 8a2c1bf209ba04cbd14153a771724bd5aa522fcdCVE List
  • Linuxaffected: 8b197a5ce7a7218bb9fc721647ba0d5734f27348 before 72f4c2b7a48423c708f2c348585419a1b71ab04cCVE List
  • Linuxaffected: 8b197a5ce7a7218bb9fc721647ba0d5734f27348 before fd8223c53ad9553b2a349d2a40e19bbc6e60fc48CVE List
  • Linuxaffected: 8b197a5ce7a7218bb9fc721647ba0d5734f27348 before ac866db277a4c73e84b4263773652e3aba326249CVE List
  • Linuxaffected: 8b197a5ce7a7218bb9fc721647ba0d5734f27348 before 5e142adbbdc54afbd01fad476c91cded41d22594CVE List
  • Linuxaffected: 8b197a5ce7a7218bb9fc721647ba0d5734f27348 before 53823e25793a97d07e6e98e0904bbf74cac8bc76CVE List
  • Linuxaffected: 2.6.34CVE List
  • Linuxunaffected: all versions before 2.6.34CVE List
  • Linuxunaffected: 5.10.271 through 5.10.*CVE List
  • Linuxunaffected: 5.15.222 through 5.15.*CVE List
  • Linuxunaffected: 6.1.189 through 6.1.*CVE List
  • Linuxunaffected: 6.6.158 through 6.6.*CVE List
  • Linuxunaffected: 6.12.112 through 6.12.*CVE List
  • Linuxunaffected: 6.18.54 through 6.18.*CVE List
  • Linuxunaffected: 7.2.8 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 8