SB2026082173 - Improper Check for Unusual or Exceptional Conditions in Linux kernel mmc host driver

Description

This security bulletin contains information about 1 vulnerability.

1) Improper Check for Unusual or Exceptional Conditions (CVE-ID: CVE-2026-68465)

CWE-ID: CWE-754 - Improper Check for Unusual or Exceptional Conditions

CVSSv4: 2 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to improper error handling in the esdhc_change_pinstate() function of the sdhci-esdhc-imx driver when changing pinctrl states. A local user can trigger a pinctrl state transition to cause a denial of service.

Only devices with a sleep pinctrl state but without 100mhz or 200mhz high-speed pin states are affected.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/5adc14cd4b905629d5b9163b3a416dcab24c7ce2
• https://git.kernel.org/stable/c/aa276aa6cbfbc5622bf974cf9be1d579ce4a5fab
• https://git.kernel.org/stable/c/bb72b2398c05fd0a4ebf13f49c7d599d7023d484