AUGUST 15, 2026
Live Feed
Back to database
Case File

CVE-2026-68463

UNKNOWN · CVSS N/A

Source: NVD + CISA KEV + EPSS · Published 2026-08-15 · Last synced 2026-08-15

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's mmc subsystem, specifically in the sdhci-esdhc-imx driver, where improper error handling during device suspension could lead to a kernel panic when accessing hardware registers. This issue arises from the use of pm_runtime_get_sync() instead of pm_runtime_resume_and_get(), which does not automatically manage the usage counter on failure. Organizations using affected Linux kernel versions should prioritize this fix to prevent potential system crashes and ensure stability in their environments.

CVE
CVE-2026-68463
Severity
UNKNOWN
CVSS
N/A
EPSS
N/A
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend Replace pm_runtime_get_sync() with pm_runtime_resume_and_get() to simplify error handling. pm_runtime_resume_and_get() automatically drops the usage counter on failure, avoiding the need for a separate pm_runtime_put_noidle() call. If it fails, the device is unclocked and accessing hardware registers would cause a kernel panic, so return the error immediately.