CVE-2026-80556

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the atmel-mci driver due to a race condition in the atmci remove() function. The &host->bh work variable is bound to the atmci work func() function and can be queued by atmci interrupt(), atmci timeout timer(), or atmci dma complete(). If the module is removed, the memory allocated for host may be released while the work is still pending or running, leading to a use-after-free scenario when atmci work func() attempts to access the host object.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.