{
  "affected": [
    {
      "ranges": [
        {
          "events": [
            {
              "introduced": "682696605c7093d2800c498c04166831e5aedf87"
            },
            {
              "fixed": "bae1cf4f9902b2065bd78b759c7fe6312855f05e"
            },
            {
              "fixed": "0bf3d168a2cc20b120d6b50f0a8ac5b40ff4d589"
            },
            {
              "fixed": "1d6e7315ee1c992b4ca42c9b11c5ed0e925a00e0"
            },
            {
              "fixed": "4553b5004eca9c9eae29a421f1a9c4d5db2c9114"
            },
            {
              "fixed": "2a863458828ade0671c2bc2e469bbd7f2340eb03"
            },
            {
              "fixed": "6feadbecdae60a6324c967f3b1493741083793a3"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Linux",
        "name": "Kernel"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "4.13.0"
            },
            {
              "fixed": "6.1.189"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "6.2.0"
            },
            {
              "fixed": "6.6.158"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "6.7.0"
            },
            {
              "fixed": "6.12.112"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "6.13.0"
            },
            {
              "fixed": "6.18.54"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "6.19.0"
            },
            {
              "fixed": "7.2.8"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "database_specific": {
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98213.json"
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nmmc: core: Cancel SDIO IRQ work before freeing host\n\nA host controller that uses sdio_signal_irq() schedules host-\u003esdio_irq_work\nfrom its interrupt handler.  That work is only cancelled on the suspend\npath (mmc_sdio_suspend()), not on the remove/free path, so a worker armed\njust before the controller freed its IRQ can run after\nmmc_host_classdev_release() has freed the host and dereference it through\ncontainer_of().\n\nCancel host-\u003esdio_irq_work in mmc_free_host(), like the existing\nhost-\u003edetect drain added by commit 1036f69e2513 (\"mmc: core: Cancel\ndelayed work before releasing host\").\n\nThis issue was found by an in-house static analysis tool.",
  "id": "CVE-2026-98213",
  "modified": "2026-10-08T02:30:37.454195331Z",
  "published": "2026-10-06T08:44:49.352Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/0bf3d168a2cc20b120d6b50f0a8ac5b40ff4d589"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/1d6e7315ee1c992b4ca42c9b11c5ed0e925a00e0"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/2a863458828ade0671c2bc2e469bbd7f2340eb03"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/4553b5004eca9c9eae29a421f1a9c4d5db2c9114"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/6feadbecdae60a6324c967f3b1493741083793a3"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/bae1cf4f9902b2065bd78b759c7fe6312855f05e"
    },
    {
      "type": "ADVISORY",
      "url": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98213.json"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-98213"
    },
    {
      "type": "PACKAGE",
      "url": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
    }
  ],
  "schema_version": "1.9.0",
  "summary": "mmc: core: Cancel SDIO IRQ work before freeing host"
}