CVE record · CVE-2026-89440

mmc: via-sdmmc: stop card-detect handling on probe failure

CVSS 7.8 HighEPSS 0.0017 · 6th percentile

Published by the CVE Program (CNA: Linux) at 11 Sept 2026, 19:43 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
Vendor	Product	Versions
Linux	Linux	affected 63400da6cd37a9793c19bb6aed7131b58b975a04 to before 5bb5327b92aae17e91c7228953c350a6ee3c94e8 git affected 0959cc1685eb19774300d43ef25e318b457b156b to before d045596706d1b25d38af4a79980b017639fea9d1 git affected ba91b413983a9235792523c6b9f7ba2586c4d75d to before 806409f12fdb14c9e4c56a64494c9b75f356cd49 git affected e4e46fb61e3bb4628170810d3f2b996b709b90d9 to before dde5b9c91e9fc64e54a2f186d3ae95868b4dbb02 git affected e4e46fb61e3bb4628170810d3f2b996b709b90d9 to before efe7f25dd27e35063477b4b0e7eed3675669fd99 git affected e4e46fb61e3bb4628170810d3f2b996b709b90d9 to before 2550f89589caad7402d618d7dffc038582c94b6b git affected e4e46fb61e3bb4628170810d3f2b996b709b90d9 to before c2b8a624911999399cc14822fec3e35032b3cee4 git affected e4e46fb61e3bb4628170810d3f2b996b709b90d9 to before 088eaa92fcebaa6b957ccf9635afdf39643a577d git affected 076bcd2c93e16b05c10564e299d6e5d26a766d00 git affected 12b8e81b77c05c658efd9cde3585bbd65ae39b59 git affected 95025a8dd0ec015872f6c16473fe04d6264e68ca git affected f59ef2a47a228e51322ad76752a55a8917c56e38 git and 9 more Other versions: unaffected
Linux	Linux	affected 6.2 unaffected before 6.2 semver unaffected 5.10.270 to 5.10., inclusive semver unaffected 5.15.221 to 5.15., inclusive semver unaffected 6.1.188 to 6.1., inclusive semver unaffected 6.6.157 to 6.6., inclusive semver unaffected 6.12.109 to 6.12., inclusive semver unaffected 6.18.50 to 6.18., inclusive semver unaffected 7.2.4 to 7.2., inclusive semver unaffected 7.3 to , inclusive original_commit_for_fix Other versions: affected

Identifiers: CVE-2026-89440
CNA: Linux
Tags: Linux kernel
Published: 11 Sept 2026
Updated: 19 Oct 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

Score	Rating	CVSS	Vector	Source
7.8	High	3.1	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	CNA (Linux)

CISA KEV Not listed.
EPSS 0.0017, the 6th percentile, on 14 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 11 Sept 2026. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.