CVE-2026-98211
N/AIn the Linux kernel, the following vulnerability has been resolved: mmc: mmci: Fix use-after-free in busy-timeout work ux500_busy_complete() can queue ux500_busy_timeout_work for an R1b command, but mmci_remove() never cancels it. The work can subsequently dereference the devm-allocated mmci_host after it has been released. Mask the controller interrupts and disable the delayed work during removal. This drains any queued instance and stops an IRQ handler that is still in progress from queueing the work again once it has been disabled. This issue was found by an in-house static analysis tool.
No known exploitation, public exploit, or elevated probability at this time. Track for changes.
Exploitation likelihood
0.2%chance of exploitation in 30 days · 10th percentile
Impact if exploited
—CVSS · not scored
- No impact metrics
Proof of concept
No public PoC is currently catalogued.
Search for new PoCs
Search GitHub now — results may be empty or unverified.
Tracked sources are checked daily for recent CVEs, including PoCs published after the original disclosure. A later release appears after a tracked source lists it and a refresh succeeds.
Data snapshot:
References and research data (JSON)
Vendor product assessments
Showing 32 of 277 vendor product statements; 245 omitted. Read the full vendor advisory.
kernel as a component of Red Hat Enterprise Linux 10 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel
- none available: Affected
kernel-64k-modules as a component of Red Hat Enterprise Linux 10 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-64k-modules
- none available: Affected
kernel-debug-uki-virt as a component of Red Hat Enterprise Linux 10 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-debug-uki-virt
- none available: Affected
kernel-rt-64k-debug-core as a component of Red Hat Enterprise Linux 10 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-rt-64k-debug-core
- none available: Affected
kernel-rt-debug-devel as a component of Red Hat Enterprise Linux 10 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-rt-debug-devel
- none available: Affected
kernel-tools-libs-devel as a component of Red Hat Enterprise Linux 10 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-tools-libs-devel
- none available: Affected
perf as a component of Red Hat Enterprise Linux 10 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/perf
- none available: Affected
kernel-64k-debug-modules as a component of Red Hat Enterprise Linux 9 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-64k-debug-modules
- none available: Affected
kernel-core as a component of Red Hat Enterprise Linux 9 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-core
- none available: Affected
kernel-debug-uki-virt-addons as a component of Red Hat Enterprise Linux 9 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-debug-uki-virt-addons
- none available: Affected
kernel-rt-64k as a component of Red Hat Enterprise Linux 9 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-rt-64k
- none available: Affected
kernel-rt-64k-devel as a component of Red Hat Enterprise Linux 9 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-rt-64k-devel
- none available: Affected
kernel-rt-debug-devel-matched as a component of Red Hat Enterprise Linux 9 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-rt-debug-devel-matched
- none available: Affected
kernel-rt-modules-internal as a component of Red Hat Enterprise Linux 9 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-rt-modules-internal
- none available: Affected
kernel-zfcpdump-modules as a component of Red Hat Enterprise Linux 9 · known affected
Vendor assessment for this product only.
pkg:rpm/redhat/kernel-zfcpdump-modules
- none available: Affected
openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 4 · known affected
Vendor assessment for this product only.
pkg:oci/ose-rhel-coreos-9?repository_url=registry.redhat.io/openshift/ose-rhel-coreos-9
- none available: Affected
kernel as a component of Red Hat Enterprise Linux 6 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel
Red Hat · CVE-2026-98211 · Updated 2026-10-09T11:04:37+00:00kernel-doc as a component of Red Hat Enterprise Linux 6 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-doc
Red Hat · CVE-2026-98211 · Updated 2026-10-09T11:04:37+00:00perf as a component of Red Hat Enterprise Linux 6 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/perf
Red Hat · CVE-2026-98211 · Updated 2026-10-09T11:04:37+00:00kernel-debug as a component of Red Hat Enterprise Linux 7 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-debug
Red Hat · CVE-2026-98211 · Updated 2026-10-09T11:04:37+00:00kernel-rt as a component of Red Hat Enterprise Linux 7 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-rt
Red Hat · CVE-2026-98211 · Updated 2026-10-09T11:04:37+00:00kernel-rt-kvm as a component of Red Hat Enterprise Linux 7 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-rt-kvm
Red Hat · CVE-2026-98211 · Updated 2026-10-09T11:04:37+00:00kernel-tools-libs as a component of Red Hat Enterprise Linux 7 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-tools-libs
Red Hat · CVE-2026-98211 · Updated 2026-10-09T11:04:37+00:00kernel as a component of Red Hat Enterprise Linux 8 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel
Red Hat · CVE-2026-98211 · Updated 2026-10-09T11:04:37+00:00kernel-debug-core as a component of Red Hat Enterprise Linux 8 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-debug-core
Red Hat · CVE-2026-98211 · Updated 2026-10-09T11:04:37+00:00kernel-doc as a component of Red Hat Enterprise Linux 8 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-doc
Red Hat · CVE-2026-98211 · Updated 2026-10-09T11:04:37+00:00kernel-rt as a component of Red Hat Enterprise Linux 8 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-rt
Red Hat · CVE-2026-98211 · Updated 2026-10-09T11:04:37+00:00kernel-rt-debug-modules as a component of Red Hat Enterprise Linux 8 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-rt-debug-modules
Red Hat · CVE-2026-98211 · Updated 2026-10-09T11:04:37+00:00kernel-rt-modules-internal as a component of Red Hat Enterprise Linux 8 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-rt-modules-internal
Red Hat · CVE-2026-98211 · Updated 2026-10-09T11:04:37+00:00kernel-tools-libs-devel as a component of Red Hat Enterprise Linux 8 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-tools-libs-devel
Red Hat · CVE-2026-98211 · Updated 2026-10-09T11:04:37+00:00kernel-zfcpdump-modules-internal as a component of Red Hat Enterprise Linux 8 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:rpm/redhat/kernel-zfcpdump-modules-internal
Red Hat · CVE-2026-98211 · Updated 2026-10-09T11:04:37+00:00openshift/ose-rhel-coreos-8 as a component of Red Hat OpenShift Container Platform 4 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:oci/ose-rhel-coreos-8?repository_url=registry.redhat.io/openshift/ose-rhel-coreos-8
Red Hat · CVE-2026-98211 · Updated 2026-10-09T11:04:37+00:00
References
Advisories
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98211.json Red Hat · CVE-2026-98211 · Updated 2026-10-09T11:04:37+00:00
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-93139 EUVD · EUVD-2026-93139
Technical & other
- https://git.kernel.org/stable/c/af6fbf72e899932f330c4e5d0b84d985c922c633CVE record · Linux · Updated 2026-10-19T09:15:42.136Z
NVD · CVE-2026-98211 · Updated 2026-10-19T10:18:21.827 - https://git.kernel.org/stable/c/7fecf79f31568de161be14911db10d1251617b01CVE record · Linux · Updated 2026-10-19T09:15:42.136Z
NVD · CVE-2026-98211 · Updated 2026-10-19T10:18:21.827 - https://git.kernel.org/stable/c/432b98c1f5daecf04a33c8e1688d26e7ac221e23CVE record · Linux · Updated 2026-10-19T09:15:42.136Z
NVD · CVE-2026-98211 · Updated 2026-10-19T10:18:21.827 - https://git.kernel.org/stable/c/2b19cf3e50cddaff07b657dae1a8f30f06032852CVE record · Linux · Updated 2026-10-19T09:15:42.136Z
NVD · CVE-2026-98211 · Updated 2026-10-19T10:18:21.827 - https://access.redhat.com/security/cve/CVE-2026-98211 Red Hat · CVE-2026-98211 · Updated 2026-10-09T11:04:37+00:00
- https://bugzilla.redhat.com/show_bug.cgi?id=2546357 Red Hat · CVE-2026-98211 · Updated 2026-10-09T11:04:37+00:00
- https://www.cve.org/CVERecord?id=CVE-2026-98211 Red Hat · CVE-2026-98211 · Updated 2026-10-09T11:04:37+00:00
- https://nvd.nist.gov/vuln/detail/CVE-2026-98211 Red Hat · CVE-2026-98211 · Updated 2026-10-09T11:04:37+00:00
- https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98211.mbox Red Hat · CVE-2026-98211 · Updated 2026-10-09T11:04:37+00:00