CVE-2026-31651

Summary

In the Linux kernel, the following vulnerability has been resolved:

mmc: vub300: fix NULL-deref on disconnect

Make sure to deregister the controller before dropping the reference to the driver data on disconnect to avoid NULL-pointer dereferences or use-after-free.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux88095e7b473a3d9ec3b9c60429576e9cbd327c89 < 6446516e626ce7c44bdadbcbb3d7677a2c52ce93affected
LinuxLinux88095e7b473a3d9ec3b9c60429576e9cbd327c89 < ba3b9429de94958dc0060d9816a915dd75c34919affected
LinuxLinux88095e7b473a3d9ec3b9c60429576e9cbd327c89 < 517b58e1d067115f80d198feee10192da4c424d0affected
LinuxLinux88095e7b473a3d9ec3b9c60429576e9cbd327c89 < 6468cab1173f44f7a4b7a05ce8abfdfd1ce1557aaffected
LinuxLinux88095e7b473a3d9ec3b9c60429576e9cbd327c89 < 53f2642d77ab5f1f303388bff5500363c6cf962caffected
LinuxLinux88095e7b473a3d9ec3b9c60429576e9cbd327c89 < c83a282615d8f7ba28cebddd54600b419d562d82affected
LinuxLinux88095e7b473a3d9ec3b9c60429576e9cbd327c89 < 8d09e75759cb2afc0732acfb5a14a93c03805a61affected
LinuxLinux88095e7b473a3d9ec3b9c60429576e9cbd327c89 < dff34ef879c5e73298443956a8b391311ba78d57affected
LinuxLinux3.0affected
LinuxLinux0 < 3.0unaffected
LinuxLinux5.10.253 <= 5.10.*unaffected
LinuxLinux5.15.203 <= 5.15.*unaffected
LinuxLinux6.1.169 <= 6.1.*unaffected
LinuxLinux6.6.135 <= 6.6.*unaffected
LinuxLinux6.12.82 <= 6.12.*unaffected
LinuxLinux6.18.23 <= 6.18.*unaffected
LinuxLinux6.19.13 <= 6.19.*unaffected
LinuxLinux7.0 <= *unaffected

Weaknesses

References