CVE-2026-68464

A flaw was found in the Linux kernel's sdhci-esdhc-imx driver. When the system enters suspend mode without disabling the usdhc interrupt, and a Wi-Fi out-of-band wakeup triggers a system resume, a card interrupt can be sent before the usdhc driver has fully resumed. This can result in an unhandled interrupt, leading to system instability or a denial of service.

This vulnerability is rated Moderate rather than Important because exploitation is limited to a local denial of service requiring specific hardware and power state transitions, with no direct compromise of system confidentiality or integrity. The issue only manifests on platforms equipped with NXP i.MX SD/MMC host controllers configured with out-of-band Wi-Fi wakeup during system suspend and resume cycles. Standard enterprise server and cloud deployments of Red Hat Enterprise Linux do not run on this hardware architecture or utilize this power management configuration, substantially minimizing exposure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.