CVE-2026-43484

Source
https://cve.org/CVERecord?id=CVE-2026-43484
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-43484.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2026-43484
Downstream
Published
2026-05-13T15:08:30.919Z
Modified
2026-05-18T06:00:14.338966170Z
Summary
mmc: core: Avoid bitfield RMW for claim/retune flags
Details

In the Linux kernel, the following vulnerability has been resolved:

mmc: core: Avoid bitfield RMW for claim/retune flags

Move claimed and retune control flags out of the bitfield word to avoid unrelated RMW side effects in asynchronous contexts.

The host->claimed bit shared a word with retune flags. Writes to claimed in __mmcclaimhost() or retunenow in mmcmqqueuerq() can overwrite other bits when concurrent updates happen in other contexts, triggering spurious WARNON(!host->claimed). Convert claimed, canretune, retunenow and retunepaused to bool to remove shared-word coupling.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/43xxx/CVE-2026-43484.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6c0cedd1ef9527ef13e66875746570e76a3188a7
Fixed
41dce4dae583a8ce06a7ebf4ce704c46a142957c
Fixed
bb7fc2498c3bb25fa6a91f22f4760005325cfbd5
Fixed
270277c2ab631044867adb1bd2f2433d3892de6e
Fixed
45038e03f15e992c48603fff8c6b1c9be5397ac9
Fixed
0e06cc511c61cff1591e5435a207759adcc76b6d
Fixed
d3a3caf44c8ec26f5d63dc17c1c7242effa60ebc
Fixed
901084c51a0a8fb42a3f37d2e9c62083c495f824

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-43484.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.15.0
Fixed
5.15.203
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.167
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.130
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.78
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.19
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
6.19.9

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-43484.json"