CVE-2026-98208

mmc: sdio_uart: fix xmit_fifo leak when the port table is full

State: Published
Severity: Not scored
Published: Oct 6, 2026
Updated: Oct 19, 2026
Reserved: Sep 25, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

mmc: sdio_uart: fix xmit_fifo leak when the port table is full

sdio_uart_add_port() allocates the transmit fifo before claiming a slot in sdio_uart_table[]. When all UART_NR slots are taken, it returns -EBUSY with the fifo still allocated, but the probe error path only kfree()s the port, leaking the transmit fifo.

Free the fifo in the failure path of sdio_uart_add_port() itself so the function retains nothing on error.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	8b197a5ce7a7218bb9fc721647ba0d5734f27348 to before 9e992d59138fcfaa4bad7cc0750265b0a8bca100Affected 8b197a5ce7a7218bb9fc721647ba0d5734f27348 to before b97b5b66c93cb4aaf6358727a73fff880a774dfdAffected 8b197a5ce7a7218bb9fc721647ba0d5734f27348 to before 8a2c1bf209ba04cbd14153a771724bd5aa522fcdAffected 8b197a5ce7a7218bb9fc721647ba0d5734f27348 to before 72f4c2b7a48423c708f2c348585419a1b71ab04cAffected 8b197a5ce7a7218bb9fc721647ba0d5734f27348 to before fd8223c53ad9553b2a349d2a40e19bbc6e60fc48Affected 8b197a5ce7a7218bb9fc721647ba0d5734f27348 to before ac866db277a4c73e84b4263773652e3aba326249Affected 8b197a5ce7a7218bb9fc721647ba0d5734f27348 to before 5e142adbbdc54afbd01fad476c91cded41d22594Affected 8b197a5ce7a7218bb9fc721647ba0d5734f27348 to before 53823e25793a97d07e6e98e0904bbf74cac8bc76Affected
LinuxLinux	2.6.34Affected before 2.6.34Not affected 5.10.271 through 5.10.Not affected 5.15.222 through 5.15.Not affected 6.1.189 through 6.1.Not affected 6.6.158 through 6.6.Not affected 6.12.112 through 6.12.Not affected 6.18.54 through 6.18.Not affected 7.2.8 through 7.2.*Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

8b197a5ce7a7218bb9fc721647ba0d5734f27348 to before 9e992d59138fcfaa4bad7cc0750265b0a8bca100Affected
8b197a5ce7a7218bb9fc721647ba0d5734f27348 to before b97b5b66c93cb4aaf6358727a73fff880a774dfdAffected
8b197a5ce7a7218bb9fc721647ba0d5734f27348 to before 8a2c1bf209ba04cbd14153a771724bd5aa522fcdAffected
8b197a5ce7a7218bb9fc721647ba0d5734f27348 to before 72f4c2b7a48423c708f2c348585419a1b71ab04cAffected
8b197a5ce7a7218bb9fc721647ba0d5734f27348 to before fd8223c53ad9553b2a349d2a40e19bbc6e60fc48Affected
8b197a5ce7a7218bb9fc721647ba0d5734f27348 to before ac866db277a4c73e84b4263773652e3aba326249Affected
8b197a5ce7a7218bb9fc721647ba0d5734f27348 to before 5e142adbbdc54afbd01fad476c91cded41d22594Affected
8b197a5ce7a7218bb9fc721647ba0d5734f27348 to before 53823e25793a97d07e6e98e0904bbf74cac8bc76Affected

LinuxLinux

2.6.34Affected
before 2.6.34Not affected
5.10.271 through 5.10.*Not affected
5.15.222 through 5.15.*Not affected
6.1.189 through 6.1.*Not affected
6.6.158 through 6.6.*Not affected
6.12.112 through 6.12.*Not affected
6.18.54 through 6.18.*Not affected
7.2.8 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.