SB2026081709 - Improper Check or Handling of Exceptional Conditions in Linux kernel mmc host driver

Description

This security bulletin contains information about 1 vulnerability.

1) Improper Check or Handling of Exceptional Conditions (CVE-ID: CVE-2026-68463)

CWE-ID: CWE-703 - Improper Check or Handling of Exceptional Conditions

CVSSv4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a local attacker to cause a denial of service.

The vulnerability exists due to improper error handling in the sdhci_esdhc_suspend() function in the sdhci-esdhc-imx driver when handling a suspend operation after a runtime power management resume failure. A local attacker can trigger the vulnerable code path to cause a denial of service.

The issue can lead to a kernel panic if hardware registers are accessed while the device is unclocked.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/5b8f11cbe8ad5726b2b63ff1574d5cffa4df18c2
• https://git.kernel.org/stable/c/6355749aebf6c78081f7096a52edcd28d2aa0fab
• https://git.kernel.org/stable/c/8da5930144712412d85e7f868693d96ec5c2018c