CVE-2026-98210

A flaw was found in the Linux kernel's mxcmmc host driver. A local user with administrative privileges could trigger this vulnerability by unbinding or removing the device, leading to a Denial of Service (DoS) or potential arbitrary code execution. The driver fails to cancel active background tasks and watchdog timers before freeing host resources during device removal, resulting in a use-after-free condition when a pending task or timer fires and accesses freed memory.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.