Use-After-Free Vulnerability in Atmel MCI Driver of Linux Kernel

CVE-2026-80556

What is CVE-2026-80556?

A use-after-free vulnerability has been identified in the Atmel MCI driver of the Linux kernel. This issue arises in the function 'atmci_remove', where the cleanup process inadvertently allows the scheduled work, associated with various interrupt handlers and timers, to access freed memory. The race condition can occur if the driver is removed while queued work is still pending, leading to potential exploitation. The vulnerability is addressed by ensuring that all sources capable of queuing work are halted before the cleanup operations are performed, effectively preventing the condition that leads to the use-after-free scenario.

References