CVE-2026-68464
Received Received - Intake

Interrupt Handling Flaw in Linux Kernel SDHCI-IMX

Publication date: 2026-08-15

Last updated on: 2026-08-15

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt When using WIFI out-of-band wakeup, an "irq xxx: nobody cared" warning occurs. This happens because the usdhc interrupt is not disabled during system suspend when device_may_wakeup() returns false. The sequence of events leading to this issue: 1. System enters suspend without disabling usdhc interrupt (because device_may_wakeup() returns false for usdhc device) 2. WIFI out-of-band wakeup triggers system resume via GPIO interrupt 3. WIFI sends a Card interrupt before usdhc has fully resumed 4. usdhc is still in runtime suspend state and cannot handle the interrupt properly 5. The unhandled interrupt triggers "nobody cared" warning Fix this by unconditionally disabling the usdhc interrupt during suspend and re-enabling it during resume, regardless of the wakeup capability. This ensures no interrupts are processed during the suspend/resume transition.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-15
Last Modified
2026-08-15
Generated
2026-08-15
AI Q&A
2026-08-15
EPSS Evaluated
N/A
NVD
CVE-2026-68464
EUVD
EUVD-2026-59086

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability affects the Linux kernel's mmc sdhci-esdhc-imx driver. It occurs when the system suspends without disabling the usdhc interrupt, leading to an unhandled interrupt warning during WIFI out-of-band wakeup. The issue arises because the interrupt is not disabled during suspend when device_may_wakeup() returns false, causing a sequence of events that results in a 'nobody cared' warning.

Detection Guidance

This vulnerability is specific to the Linux kernel's mmc subsystem and may manifest as an 'irq nobody cared' warning during system suspend/resume cycles. Check kernel logs for this message using: dmesg | grep -i 'nobody cared'. If WIFI out-of-band wakeup is used, monitor usdhc interrupts during suspend transitions.

Impact Analysis

This vulnerability can cause system instability or unexpected behavior during suspend/resume cycles, particularly when using WIFI out-of-band wakeup. It may trigger error messages and disrupt normal operation, though it does not directly compromise security or data integrity.

Mitigation Strategies

Apply the kernel patch that unconditionally disables usdhc interrupts during suspend. Update to a Linux kernel version containing the fix. If immediate patching isn't possible, disable WIFI out-of-band wakeup as a temporary workaround.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-68464. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart