CVE-2026-68465

About vulnerability

In the Linux kernel, the following vulnerability has been resolved:

mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore

esdhc_change_pinstate() checks for pins_100mhz and pins_200mhz at the top of the function and returns -EINVAL if either is not defined. This prevents the default case from ever being reached, which means devices with a sleep pinctrl state but without high-speed pin states (100mhz/ 200mhz) can never restore their default pin configuration.

Move the IS_ERR checks for pins_100mhz and pins_200mhz into their respective switch cases.

Affected product:

Debian 10 ELS

Affected packages:

linux @ 4.19.0

Live-patch status from KernelCare for each operating system.