CVE-2026-68463

A flaw was found in the Linux kernel, specifically within the mmc: sdhci-esdhc-imx component responsible for managing multimedia card (MMC) host controllers. During system suspend operations, an error in power management could cause the system to attempt accessing hardware that is not properly initialized. This improper access would lead to a kernel panic, effectively causing the system to crash and resulting in a denial of service.

This vulnerability is rated as Moderate severity because triggering it requires local access and occurs only during system power suspend transitions on supported hardware platforms, resulting in an unhandled crash rather than arbitrary code execution or data exposure. The affected driver is specialized for NXP i.MX SD/MMC host controllers, which are primarily deployed in targeted embedded and automotive environments rather than general-purpose enterprise server installations. Standard systems lacking this specific controller hardware do not load or expose the vulnerable power management code paths.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.