Security News
긴급도 10/100 심각도 미평가 · 미평가 악용확률 12.0%

CVE-2026-98209

Qualys 위협 인텔 · 심각도 3/5 · QID 6296653 · Debian
측면이동 쉬운 악용 대량 데이터 유출 서비스 거부
  • CVSS Temporal 3.9 (현재 위협 반영)
  • 익스플로잇 성숙도: 미증명 (1/4)
  • 공격 위치: 로컬/인증필요
  • 패치: 가능
In the Linux kernel, the following vulnerability has been resolved:

mmc: sdhci-of-aspeed: Remove children before releasing SDC resources

Probe failure and removal leave SDHCI child devices registered after the
parent clock and managed resources are released.

Unregister the OF children in reverse order before disabling the parent
clock on both paths. Use of_platform_device_destroy() because manual
child creation does not set the flag required by of_platform_depopulate().

This issue was identified during our ongoing static-analysis research
while reviewing kernel code.

NVD 상세 ↗   GitHub Advisory ↗   참고 링크 ↗

이 취약점을 다룬 기사 (1)

← 취약점 목록