CVE-2026-80556

A flaw was found in the Linux kernel's atmel-mci component. A race condition during the removal of the atmel-mci module can lead to a use-after-free vulnerability. This occurs when work items related to the module are still pending or running after the associated memory has been freed. This flaw could allow a local attacker to cause a denial of service or potentially achieve privilege escalation.

A moderate use-after-free vulnerability was found in the Linux kernel's atmel-mci (Atmel MultiMedia Card Interface) driver. When the atmel-mci module is being removed, a race condition can leave the bottom-half work item, which may be queued by the interrupt handler, the timeout timer, or the DMA completion callback, still pending or running after the memory allocated for the host structure has been freed, resulting in a use-after-free. A local attacker could exploit this race to cause a denial of service (kernel panic) or potentially escalate privileges. All Red Hat Enterprise Linux and Red Hat In-Vehicle OS kernel, kernel-rt, and kernel-ivos-qualcomm packages are not affected by this flaw because the vulnerable atmel-mci driver code is not present in the shipped Red Hat kernels. The upstream CVE record rates this flaw as important (CVSS 7.8) with potential confidentiality, integrity, and availability impact, while Red Hat rates it moderate (CVSS 5.5) because the most likely consequence of this use-after-free is loss of availability.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.