CVE-2026-98207

A flaw was found in the Linux kernel's MultiMediaCard Serial Peripheral Interface (MMC SPI) driver. A local user or connected device can trigger this flaw during multi-block data transfers that encounter a Cyclic Redundancy Check (CRC) transmission error. The driver initiates a recovery retry without clearing the transferred byte counter, causing a subsequent successful attempt to report more bytes than were actually transferred. This incorrect accounting can exceed the original request size, potentially leading to data corruption or unexpected system behavior.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.