CVE-2026-98208
Published Oct 6, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: mmc: sdio_uart: fix xmit_fifo leak when the port table is full sdio_uart_add_port() allocates the transmit fifo before claiming a slot in sdio_uart_table[]. When all UART_NR slots are taken, it returns -EBUSY with the fifo still allocated, but the probe error path only kfree()s the port, leaking the transmit fifo. Free the fifo in the failure path of sdio_uart_add_port() itself so the function retains nothing on error.
Is your site exposed to CVE-2026-98208?
Run a free security scan — no signup, results in seconds.
EPSS — Exploit Prediction
0.0018
Probability of exploitation
0.07%
Percentile rank
EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.
References
Other References
https://git.kernel.org/stable/c/53823e25793a97d07e6e98e0904bbf74cac8bc76
https://git.kernel.org/stable/c/5e142adbbdc54afbd01fad476c91cded41d22594
https://git.kernel.org/stable/c/72f4c2b7a48423c708f2c348585419a1b71ab04c
https://git.kernel.org/stable/c/8a2c1bf209ba04cbd14153a771724bd5aa522fcd
https://git.kernel.org/stable/c/9e992d59138fcfaa4bad7cc0750265b0a8bca100
https://git.kernel.org/stable/c/ac866db277a4c73e84b4263773652e3aba326249
https://git.kernel.org/stable/c/b97b5b66c93cb4aaf6358727a73fff880a774dfd
https://git.kernel.org/stable/c/fd8223c53ad9553b2a349d2a40e19bbc6e60fc48
Frequently Asked Questions
What is CVE-2026-98208? +
In the Linux kernel, the following vulnerability has been resolved:
mmc: sdio_uart: fix xmit_fifo leak when the port table is full
sdio_uart_add_port() allocates the transmit fifo before claiming a
slot in sdio_uart_table[]. When all UART_NR slots are taken, it
returns -EBUSY with the fifo still allocated, but the probe error
path only kfree()s the port, leaking the transmit fifo.
Free the fifo in the failure path of sdio_uart_add_port() itself so
the function retains nothing on error.
How do I check if I'm vulnerable to CVE-2026-98208? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.