CVE-2026-68463: mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend
In the Linux kernel, the following vulnerability has been resolved:
mmc: sdhci-esdhc-imx: use pmruntimeresumeandget() in suspend
Replace pmruntimegetsync() with pmruntimeresumeandget() to simplify error handling. pmruntimeresumeandget() automatically drops the usage counter on failure, avoiding the need for a separate pmruntimeputnoidle() call. If it fails, the device is unclocked and accessing hardware registers would cause a kernel panic, so return the error immediately.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68463?
CVE-2026-68463 has a risk level of 37, indicating a moderate severity vulnerability.
How do I fix CVE-2026-68463?
To fix CVE-2026-68463, update the Linux kernel to a version where pm_runtime_get_sync() is replaced with pm_runtime_resume_and_get() in the sdhci-esdhc-imx driver.
What systems are affected by CVE-2026-68463?
CVE-2026-68463 affects Linux kernel versions utilizing the mmc: sdhci-esdhc-imx driver.
What does CVE-2026-68463 involve?
CVE-2026-68463 involves a change in the kernel's power management handling to simplify error management during device suspension.
Is there a workaround for CVE-2026-68463?
There is no known workaround for CVE-2026-68463; updating the kernel is the recommended resolution.