{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-68463", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-07-30T09:28:09.396Z", "datePublished": "2026-08-15T05:51:22.807Z", "dateUpdated": "2026-08-17T05:06:04.488Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-17T05:06:04.488Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend\n\nReplace pm_runtime_get_sync() with pm_runtime_resume_and_get() to\nsimplify error handling. pm_runtime_resume_and_get() automatically\ndrops the usage counter on failure, avoiding the need for a separate\npm_runtime_put_noidle() call. If it fails, the device is unclocked and\naccessing hardware registers would cause a kernel panic, so return the\nerror immediately."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/mmc/host/sdhci-esdhc-imx.c"], "versions": [{"version": "676a83855614635af3bf31ad3f8fec4031f81354", "lessThan": "5b8f11cbe8ad5726b2b63ff1574d5cffa4df18c2", "status": "affected", "versionType": "git"}, {"version": "676a83855614635af3bf31ad3f8fec4031f81354", "lessThan": "6355749aebf6c78081f7096a52edcd28d2aa0fab", "status": "affected", "versionType": "git"}, {"version": "676a83855614635af3bf31ad3f8fec4031f81354", "lessThan": "8da5930144712412d85e7f868693d96ec5c2018c", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/mmc/host/sdhci-esdhc-imx.c"], "versions": [{"version": "6.16", "status": "affected"}, {"version": "0", "lessThan": "6.16", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.40", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1.5", "lessThanOrEqual": "7.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.16", "versionEndExcluding": "6.18.40"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.16", "versionEndExcluding": "7.1.5"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.16", "versionEndExcluding": "7.2"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/5b8f11cbe8ad5726b2b63ff1574d5cffa4df18c2"}, {"url": "https://git.kernel.org/stable/c/6355749aebf6c78081f7096a52edcd28d2aa0fab"}, {"url": "https://git.kernel.org/stable/c/8da5930144712412d85e7f868693d96ec5c2018c"}], "title": "mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/mmc/host/sdhci-esdhc-imx.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "5b8f11cbe8ad5726b2b63ff1574d5cffa4df18c2", "status": "affected", "version": "676a83855614635af3bf31ad3f8fec4031f81354", "versionType": "git"}, {"lessThan": "6355749aebf6c78081f7096a52edcd28d2aa0fab", "status": "affected", "version": "676a83855614635af3bf31ad3f8fec4031f81354", "versionType": "git"}, {"lessThan": "8da5930144712412d85e7f868693d96ec5c2018c", "status": "affected", "version": "676a83855614635af3bf31ad3f8fec4031f81354", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/mmc/host/sdhci-esdhc-imx.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.16"}, {"lessThan": "6.16", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.40", "versionType": "semver"}, {"lessThanOrEqual": "7.1.*", "status": "unaffected", "version": "7.1.5", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend\n\nReplace pm_runtime_get_sync() with pm_runtime_resume_and_get() to\nsimplify error handling. pm_runtime_resume_and_get() automatically\ndrops the usage counter on failure, avoiding the need for a separate\npm_runtime_put_noidle() call. If it fails, the device is unclocked and\naccessing hardware registers would cause a kernel panic, so return the\nerror immediately."}], "id": "CVE-2026-68463", "lastModified": "2026-08-17T06:17:55.633", "metrics": {}, "published": "2026-08-15T06:18:39.910", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/5b8f11cbe8ad5726b2b63ff1574d5cffa4df18c2"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/6355749aebf6c78081f7096a52edcd28d2aa0fab"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/8da5930144712412d85e7f868693d96ec5c2018c"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend", "id": "2516655", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2516655"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-911", "details": ["A flaw was found in the Linux kernel, specifically within the `mmc: sdhci-esdhc-imx` component responsible for managing multimedia card (MMC) host controllers. During system suspend operations, an error in power management could cause the system to attempt accessing hardware that is not properly initialized. This improper access would lead to a kernel panic, effectively causing the system to crash and resulting in a denial of service."], "name": "CVE-2026-68463", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-08-15T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-68463\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-68463\nhttps://lore.kernel.org/linux-cve-announce/2026081503-CVE-2026-68463-4c2b@gregkh/T"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[676a83855614635af3bf31ad3f8fec4031f81354,5b8f11cbe8ad5726b2b63ff1574d5cffa4df18c2)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[676a83855614635af3bf31ad3f8fec4031f81354,6355749aebf6c78081f7096a52edcd28d2aa0fab)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[676a83855614635af3bf31ad3f8fec4031f81354,8da5930144712412d85e7f868693d96ec5c2018c)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "6.16"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[0,6.16)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.40,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.1.5,7.2.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.2-rc4,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-08-15T08:15:04.237790+00:00", "updated": "2026-08-18T06:30:08.617284+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"], "weaknesses": ["CWE-911"]}