CVE-2026-99034

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-99034
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-99034.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2026-99034
Downstream
Related
Published
2026-10-23T12:21:41Z
Modified
2026-11-04T14:27:27Z
Summary
mmc: sdhci-sprd: disable runtime PM on remove
Details

In the Linux kernel, the following vulnerability has been resolved:

mmc: sdhci-sprd: disable runtime PM on remove

sdhci_sprd_probe() enables runtime PM, while sdhci_sprd_remove() does not perform the corresponding runtime PM cleanup.

The probe failure path disables runtime PM before disabling the clocks, but the normal remove path directly disables clocks that are also managed by the runtime PM callbacks. If the device is runtime suspended, those clocks may already be disabled.

Resume the device before removal, disable runtime PM and drop the temporary runtime PM reference before disabling the clocks.

This issue was found by manual code inspection.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/99xxx/CVE-2026-99034.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
fb8bd90f83c4dd86bc7fdae406152d63c5852f92
Fixed
a0c7facc0fe9ec772cf8bffac2315a8e1311d39a
Fixed
4dce8c272417a564bd8c8d2ea88ef901e5447f22
Fixed
cccd175dd2bfbf8c34a1b0f413760d2ce9ff3ac9
Fixed
605a59639abb9cb63cd7676460461fb0b34756b3
Fixed
03244b8713d044425db5dbee08037ecd79b684f9
Fixed
3a1caa886d41d9bcc9a402906336eda34a90d323
Fixed
dbad91a31c482063c0a87c90aa83c9001972c6ac
Fixed
e1c6c10a6a70a69e29b04fcc1ebe4b9bcbc7a49a

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-99034.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.20.0
Fixed
5.10.273
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.224
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.191
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.160
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.113
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.57
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.11

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-99034.json"