CVE-2026-68465
Received Received - Intake

Fix Pin State Restore in sdhci-esdhc-imx Linux Kernel Driver

Publication date: 2026-08-15

Last updated on: 2026-08-15

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore esdhc_change_pinstate() checks for pins_100mhz and pins_200mhz at the top of the function and returns -EINVAL if either is not defined. This prevents the default case from ever being reached, which means devices with a sleep pinctrl state but without high-speed pin states (100mhz/ 200mhz) can never restore their default pin configuration. Move the IS_ERR checks for pins_100mhz and pins_200mhz into their respective switch cases.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-15
Last Modified
2026-08-15
Generated
2026-08-15
AI Q&A
2026-08-15
EPSS Evaluated
N/A
NVD
CVE-2026-68465
EUVD
EUVD-2026-59087

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel affects the mmc subsystem, specifically the sdhci-esdhc-imx driver. The issue is in the esdhc_change_pinstate() function, which incorrectly checks for high-speed pin states (100mhz/200mhz) at the start and returns an error if they are not defined. This prevents devices with sleep pinctrl states but without high-speed pin states from restoring their default pin configuration.

Detection Guidance

This vulnerability is specific to the Linux kernel's mmc/sdhci-esdhc-imx driver and affects pin state management. Detection requires checking kernel logs for related errors or examining the driver's behavior during high-speed operations. No direct network detection commands apply.

Impact Analysis

This vulnerability may cause devices using the sdhci-esdhc-imx driver to fail to restore their default pin configuration after sleep or high-speed operations. This could lead to hardware malfunctions, data corruption, or system instability in affected Linux systems.

Mitigation Strategies

Apply the latest Linux kernel update that includes the fix for CVE-2026-68465. If using a custom kernel, backport the patch for mmc: sdhci-esdhc-imx to restore default pin state functionality.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-68465. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart