CVE-2026-68465

A flaw was found in the Linux kernel's SDHCI eSDHC i.MX driver. The esdhc_change_pinstate() function contains an error in how it checks for high-speed pin states. This prevents devices with a sleep pinctrl state from restoring their default pin configuration, potentially leading to an improper system state.

This vulnerability is rated Moderate because exploitation requires local access on specific NXP i.MX hardware platforms, confining the blast radius and precluding remote exploitation. The defect arises during power management transitions where the eSDHC host controller interface fails to return to its default pin state after waking on boards lacking high-frequency pin configurations. Enterprise systems running standard x86_64 server environments do not use this specialized hardware driver, restricting the issue primarily to embedded or automotive deployments running on affected silicon.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.