CVE-2026-31650
kernel: mmc: vub300: fix use-after-free on disconnect
Loading…
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · April 24, 2026
Updated · June 28, 2026
Description
A flaw was found in the vub300 driver within the Linux kernel. This vulnerability is a memory management issue where the system attempts to use memory that has already been freed, known as a 'use-after-free' error. This can happen when the driver is disconnected, potentially leading to system crashes or a denial of service. Additionally, the driver's incorrect handling of memory resources can cause memory leaks, which might degrade system performance over time.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-911 · Improper Update of Reference Count