CVE-2026-31651: mmc: vub300: fix NULL-deref on disconnect
In the Linux kernel, the following vulnerability has been resolved:
mmc: vub300: fix NULL-deref on disconnect
Make sure to deregister the controller before dropping the reference to the driver data on disconnect to avoid NULL-pointer dereferences or use-after-free.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-31651?
CVE-2026-31651 has a severity rating that indicates a risk of NULL-pointer dereference on disconnect in the Linux kernel.
How do I fix CVE-2026-31651?
To fix CVE-2026-31651, ensure that you deregister the controller before dropping the reference to the driver data on disconnect.
What systems are affected by CVE-2026-31651?
CVE-2026-31651 affects the Linux kernel, specifically versions that include the vub300 driver.
What are the potential consequences of CVE-2026-31651?
The potential consequences of CVE-2026-31651 include system crashes or instability due to NULL-pointer dereferences.
Is there a patch available for CVE-2026-31651?
Yes, patches to resolve CVE-2026-31651 are available in the latest updates of the Linux kernel.