CVE-2026-68465: mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore
In the Linux kernel, the following vulnerability has been resolved:
mmc: sdhci-esdhc-imx: fix esdhcchangepinstate() to allow default state restore
esdhcchangepinstate() checks for pins100mhz and pins200mhz at the top of the function and returns -EINVAL if either is not defined. This prevents the default case from ever being reached, which means devices with a sleep pinctrl state but without high-speed pin states (100mhz/ 200mhz) can never restore their default pin configuration.
Move the ISERR checks for pins100mhz and pins200mhz into their respective switch cases.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68465?
The severity of CVE-2026-68465 is rated at risk level 12.
How does CVE-2026-68465 affect the Linux kernel?
CVE-2026-68465 affects the Linux kernel by disabling the default state restoration in esdhc_change_pinstate() if certain pin definitions are missing.
How do I fix CVE-2026-68465?
To fix CVE-2026-68465, ensure that the pin definitions for pins_100mhz and pins_200mhz are properly configured in your kernel setup.
What architectures are affected by CVE-2026-68465?
CVE-2026-68465 affects architectures that utilize the mmc: sdhci-esdhc-imx driver in the Linux kernel.
Is CVE-2026-68465 a temporary or permanent fix?
CVE-2026-68465 represents a permanent fix in the Linux kernel that requires proper implementation of pin state definitions.