CLEANSTART-2026-HX60135 patch for CVE-2020-17380/CVE-2020-25085 was found to be ineffective, thus making QEMU vulnerable to the out-of-bounds read/write access issues previously found in the SDHCI controller emulation code

Security vulnerability affects the qemu package. The patch for CVE-2020-17380/CVE-2020-25085 was found to be ineffective, thus making QEMU vulnerable to the out-of-bounds read/write access issues previously found in the SDHCI controller emulation code...

CVE-2026-99034

A flaw was found in the Linux kernel's Spreadtrum SDHCI Secure Digital Host Controller Interface driver. This flaw allows a local privileged user to cause a Denial of Service DoS by triggering improper power management cleanup during device removal. Because the driver fails to disable runtime pow...

DEBIAN-CVE-2026-99034

In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-sprd: disable runtime PM on remove sdhcisprdprobe enables runtime PM, while sdhcisprdremove does not perform the corresponding runtime PM cleanup. The probe failure path disables runtime PM before disabling the clocks,...

CVE-2026-99034

In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-sprd: disable runtime PM on remove sdhcisprdprobe enables runtime PM, while sdhcisprdremove does not perform the corresponding runtime PM cleanup. The probe failure path disables runtime PM before disabling the clocks,...

UBUNTU-CVE-2026-99034

In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-sprd: disable runtime PM on remove sdhcisprdprobe enables runtime PM, while sdhcisprdremove does not perform the corresponding runtime PM cleanup. The probe failure path disables runtime PM before disabling the clocks,...

CVE-2026-99034

The Linux kernel contains a vulnerability in the sdhci-sprd driver where the sdhci_sprd_remove() function fails to perform necessary runtime PM cleanup . While sdhci_sprd_probe() enables runtime PM, the removal path directly disables clocks managed by runtime PM callbacks without proper cleanup. ...

CVE-2026-99034 mmc: sdhci-sprd: disable runtime PM on remove

In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-sprd: disable runtime PM on remove sdhcisprdprobe enables runtime PM, while sdhcisprdremove does not perform the corresponding runtime PM cleanup. The probe failure path disables runtime PM before disabling the clocks,...

CVE-2026-99034

In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-sprd: disable runtime PM on remove sdhcisprdprobe enables runtime PM, while sdhcisprdremove does not perform the corresponding runtime PM cleanup. The probe failure path disables runtime PM before disabling the clocks,...

CVE-2026-99034 mmc: sdhci-sprd: disable runtime PM on remove

In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-sprd: disable runtime PM on remove sdhcisprdprobe enables runtime PM, while sdhcisprdremove does not perform the corresponding runtime PM cleanup. The probe failure path disables runtime PM before disabling the clocks,...

EUVD-2026-108829

In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-sprd: disable runtime PM on remove sdhcisprdprobe enables runtime PM, while sdhcisprdremove does not perform the corresponding runtime PM cleanup. The probe failure path disables runtime PM before disabling the clocks,...

Linux kernel security vulnerabilities

A security vulnerability exists in the Linux kernel. It stems from the fact that the sdhcisprdremove function in drivers/mmc/host/sdhci-sprd.c fails to perform runtime PM cleanup. As a result, clocks managed by the runtime PM callback are disabled directly when the device is in a runtime suspend...

PT-2026-122011

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mmc sdhci-sprd driver where the sdhci sprd remove function fails to perform the necessary runtime Power Management PM cleanup. While sdhci sprd probe enables runti...

Astra Linux – vulnerability in linux-5.10, linux-5.15, linux

In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-pci: Fixed a possible memory leak caused by missing pcidevput pcigetdevice increments the reference count for the returned pcidev. We must use pcidevput to decrement the reference count before amdprobe returns. There i...

Astra Linux – vulnerability in qemu

QEMU 5.0.0 contains a heap-based Buffer Overflow in flatviewreadcontinue within exec.c, as hw/sd/sdhci.c mishandles a write operation in the SDHCBLKSIZE case...

CVE-2026-98209

A flaw was found in the Linux kernel's ASPEED SDHCI Secure Digital Host Controller Interface driver. This issue allows a local user to cause a Denial of Service DoS by triggering a system crash. During device removal or probe failure, child devices remain registered after the parent controller's...

SUSE CVE-2026-98209

In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-of-aspeed: Remove children before releasing SDC resources Probe failure and removal leave SDHCI child devices registered after the parent clock and managed resources are released. Unregister the OF children in reverse...

SUSE CVE-2026-98212

In the Linux kernel, the following vulnerability has been resolved: mmc: hsq: Fix use-after-free in retry work mmchsqpumprequests queues retrywork when requestatomic returns -EBUSY; today sdhci-sprd is the only consumer that implements requestatomic. The work is embedded in a devm-allocated mmchs...

CVE-2026-98209

In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-of-aspeed: Remove children before releasing SDC resources Probe failure and removal leave SDHCI child devices registered after the parent clock and managed resources are released. Unregister the OF children in reverse...

AZL-106418 CVE-2026-98212 affecting package kernel for versions less than 6.6.158.1-1

In the Linux kernel, the following vulnerability has been resolved: mmc: hsq: Fix use-after-free in retry work mmchsqpumprequests queues retrywork when requestatomic returns -EBUSY; today sdhci-sprd is the only consumer that implements requestatomic. The work is embedded in a devm-allocated mmchs...

DEBIAN-CVE-2026-98209

In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-of-aspeed: Remove children before releasing SDC resources Probe failure and removal leave SDHCI child devices registered after the parent clock and managed resources are released. Unregister the OF children in reverse...