CVE-2026-68464: mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt
In the Linux kernel, the following vulnerability has been resolved:
mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt
When using WIFI out-of-band wakeup, an "irq xxx: nobody cared" warning occurs. This happens because the usdhc interrupt is not disabled during system suspend when devicemaywakeup() returns false.
The sequence of events leading to this issue: 1. System enters suspend without disabling usdhc interrupt (because devicemaywakeup() returns false for usdhc device) 2. WIFI out-of-band wakeup triggers system resume via GPIO interrupt 3. WIFI sends a Card interrupt before usdhc has fully resumed 4. usdhc is still in runtime suspend state and cannot handle the interrupt properly 5. The unhandled interrupt triggers "nobody cared" warning
Fix this by unconditionally disabling the usdhc interrupt during suspend and re-enabling it during resume, regardless of the wakeup capability. This ensures no interrupts are processed during the suspend/resume transition.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Modify the driver to disable the usdhc interrupt during suspend unconditionally, rather than only when device_may_wakeup() indicates the device may wake. This prevents the unhandled "irq xxx: nobody cared" warning during WIFI out-of-band wakeup and ensures no interrupts are processed during suspend/resume.
Linux kernel (mmc: sdhci-esdhc-imx) usdhc interrupt during suspend = unconditionally disable during suspend (do not depend on device_may_wakeup())
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68464?
CVE-2026-68464 has a risk rating of 17.
What does CVE-2026-68464 exploit?
CVE-2026-68464 exploits the failure to disable the usdhc interrupt during system suspend.
How do I fix CVE-2026-68464?
To fix CVE-2026-68464, ensure that IRQ is disabled during system suspend in the affected Linux kernel component.
Which component is affected by CVE-2026-68464?
CVE-2026-68464 affects the mmc: sdhci-esdhc-imx component of the Linux kernel.
When was CVE-2026-68464 published?
CVE-2026-68464 was published on August 15, 2026.