CVE-2026-99034

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-99034", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.387Z", "datePublished": "2026-10-23T12:21:41.941Z", "dateUpdated": "2026-10-30T12:41:07.264Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-10-30T12:41:07.264Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmmc: sdhci-sprd: disable runtime PM on remove\n\nsdhci_sprd_probe() enables runtime PM, while sdhci_sprd_remove() does\nnot perform the corresponding runtime PM cleanup.\n\nThe probe failure path disables runtime PM before disabling the clocks,\nbut the normal remove path directly disables clocks that are also\nmanaged by the runtime PM callbacks. If the device is runtime\nsuspended, those clocks may already be disabled.\n\nResume the device before removal, disable runtime PM and drop the\ntemporary runtime PM reference before disabling the clocks.\n\nThis issue was found by manual code inspection."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/mmc/host/sdhci-sprd.c"], "versions": [{"version": "fb8bd90f83c4dd86bc7fdae406152d63c5852f92", "lessThan": "a0c7facc0fe9ec772cf8bffac2315a8e1311d39a", "status": "affected", "versionType": "git"}, {"version": "fb8bd90f83c4dd86bc7fdae406152d63c5852f92", "lessThan": "4dce8c272417a564bd8c8d2ea88ef901e5447f22", "status": "affected", "versionType": "git"}, {"version": "fb8bd90f83c4dd86bc7fdae406152d63c5852f92", "lessThan": "cccd175dd2bfbf8c34a1b0f413760d2ce9ff3ac9", "status": "affected", "versionType": "git"}, {"version": "fb8bd90f83c4dd86bc7fdae406152d63c5852f92", "lessThan": "605a59639abb9cb63cd7676460461fb0b34756b3", "status": "affected", "versionType": "git"}, {"version": "fb8bd90f83c4dd86bc7fdae406152d63c5852f92", "lessThan": "03244b8713d044425db5dbee08037ecd79b684f9", "status": "affected", "versionType": "git"}, {"version": "fb8bd90f83c4dd86bc7fdae406152d63c5852f92", "lessThan": "3a1caa886d41d9bcc9a402906336eda34a90d323", "status": "affected", "versionType": "git"}, {"version": "fb8bd90f83c4dd86bc7fdae406152d63c5852f92", "lessThan": "dbad91a31c482063c0a87c90aa83c9001972c6ac", "status": "affected", "versionType": "git"}, {"version": "fb8bd90f83c4dd86bc7fdae406152d63c5852f92", "lessThan": "e1c6c10a6a70a69e29b04fcc1ebe4b9bcbc7a49a", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/mmc/host/sdhci-sprd.c"], "versions": [{"version": "4.20", "status": "affected"}, {"version": "0", "lessThan": "4.20", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.273", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.224", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.191", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.160", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.113", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.57", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2.11", "lessThanOrEqual": "7.2.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.3", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.20", "versionEndExcluding": "5.10.273"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.20", "versionEndExcluding": "5.15.224"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.20", "versionEndExcluding": "6.1.191"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.20", "versionEndExcluding": "6.6.160"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.20", "versionEndExcluding": "6.12.113"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.20", "versionEndExcluding": "6.18.57"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.20", "versionEndExcluding": "7.2.11"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.20", "versionEndExcluding": "7.3"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/a0c7facc0fe9ec772cf8bffac2315a8e1311d39a"}, {"url": "https://git.kernel.org/stable/c/4dce8c272417a564bd8c8d2ea88ef901e5447f22"}, {"url": "https://git.kernel.org/stable/c/cccd175dd2bfbf8c34a1b0f413760d2ce9ff3ac9"}, {"url": "https://git.kernel.org/stable/c/605a59639abb9cb63cd7676460461fb0b34756b3"}, {"url": "https://git.kernel.org/stable/c/03244b8713d044425db5dbee08037ecd79b684f9"}, {"url": "https://git.kernel.org/stable/c/3a1caa886d41d9bcc9a402906336eda34a90d323"}, {"url": "https://git.kernel.org/stable/c/dbad91a31c482063c0a87c90aa83c9001972c6ac"}, {"url": "https://git.kernel.org/stable/c/e1c6c10a6a70a69e29b04fcc1ebe4b9bcbc7a49a"}], "title": "mmc: sdhci-sprd: disable runtime PM on remove", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/mmc/host/sdhci-sprd.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "a0c7facc0fe9ec772cf8bffac2315a8e1311d39a", "status": "affected", "version": "fb8bd90f83c4dd86bc7fdae406152d63c5852f92", "versionType": "git"}, {"lessThan": "4dce8c272417a564bd8c8d2ea88ef901e5447f22", "status": "affected", "version": "fb8bd90f83c4dd86bc7fdae406152d63c5852f92", "versionType": "git"}, {"lessThan": "cccd175dd2bfbf8c34a1b0f413760d2ce9ff3ac9", "status": "affected", "version": "fb8bd90f83c4dd86bc7fdae406152d63c5852f92", "versionType": "git"}, {"lessThan": "605a59639abb9cb63cd7676460461fb0b34756b3", "status": "affected", "version": "fb8bd90f83c4dd86bc7fdae406152d63c5852f92", "versionType": "git"}, {"lessThan": "03244b8713d044425db5dbee08037ecd79b684f9", "status": "affected", "version": "fb8bd90f83c4dd86bc7fdae406152d63c5852f92", "versionType": "git"}, {"lessThan": "3a1caa886d41d9bcc9a402906336eda34a90d323", "status": "affected", "version": "fb8bd90f83c4dd86bc7fdae406152d63c5852f92", "versionType": "git"}, {"lessThan": "dbad91a31c482063c0a87c90aa83c9001972c6ac", "status": "affected", "version": "fb8bd90f83c4dd86bc7fdae406152d63c5852f92", "versionType": "git"}, {"lessThan": "e1c6c10a6a70a69e29b04fcc1ebe4b9bcbc7a49a", "status": "affected", "version": "fb8bd90f83c4dd86bc7fdae406152d63c5852f92", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/mmc/host/sdhci-sprd.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "4.20"}, {"lessThan": "4.20", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "5.10.*", "status": "unaffected", "version": "5.10.273", "versionType": "semver"}, {"lessThanOrEqual": "5.15.*", "status": "unaffected", "version": "5.15.224", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.191", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.160", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.113", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.57", "versionType": "semver"}, {"lessThanOrEqual": "7.2.*", "status": "unaffected", "version": "7.2.11", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.3", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmmc: sdhci-sprd: disable runtime PM on remove\n\nsdhci_sprd_probe() enables runtime PM, while sdhci_sprd_remove() does\nnot perform the corresponding runtime PM cleanup.\n\nThe probe failure path disables runtime PM before disabling the clocks,\nbut the normal remove path directly disables clocks that are also\nmanaged by the runtime PM callbacks. If the device is runtime\nsuspended, those clocks may already be disabled.\n\nResume the device before removal, disable runtime PM and drop the\ntemporary runtime PM reference before disabling the clocks.\n\nThis issue was found by manual code inspection."}], "id": "CVE-2026-99034", "lastModified": "2026-10-30T13:21:40.433", "metrics": {}, "published": "2026-10-23T13:17:26.580", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/03244b8713d044425db5dbee08037ecd79b684f9"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/3a1caa886d41d9bcc9a402906336eda34a90d323"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/4dce8c272417a564bd8c8d2ea88ef901e5447f22"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/605a59639abb9cb63cd7676460461fb0b34756b3"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/a0c7facc0fe9ec772cf8bffac2315a8e1311d39a"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/cccd175dd2bfbf8c34a1b0f413760d2ce9ff3ac9"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/dbad91a31c482063c0a87c90aa83c9001972c6ac"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/e1c6c10a6a70a69e29b04fcc1ebe4b9bcbc7a49a"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: mmc: sdhci-sprd: disable runtime PM on remove", "id": "2559832", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2559832"}, "csaw": false, "cvss3": {"cvss3_base_score": "2.3", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L", "status": "draft"}, "cwe": "CWE-459", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nmmc: sdhci-sprd: disable runtime PM on remove\nsdhci_sprd_probe() enables runtime PM, while sdhci_sprd_remove() does\nnot perform the corresponding runtime PM cleanup.\nThe probe failure path disables runtime PM before disabling the clocks,\nbut the normal remove path directly disables clocks that are also\nmanaged by the runtime PM callbacks. If the device is runtime\nsuspended, those clocks may already be disabled.\nResume the device before removal, disable runtime PM and drop the\ntemporary runtime PM reference before disabling the clocks.\nThis issue was found by manual code inspection.", "A flaw was found in the Linux kernel's Spreadtrum SDHCI (Secure Digital Host Controller Interface) driver. This flaw allows a local privileged user to cause a Denial of Service (DoS) by triggering improper power management cleanup during device removal. Because the driver fails to disable runtime power management before disabling hardware clocks, unbinding or removing a suspended device can lead to state inconsistencies and a system crash."], "name": "CVE-2026-99034", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "openshift/ose-rhel-coreos-8", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "openshift/ose-rhel-coreos-9", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2026-10-23T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-99034\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-99034\nhttps://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-99034.mbox"], "threat_severity": "Low"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[fb8bd90f83c4dd86bc7fdae406152d63c5852f92,605a59639abb9cb63cd7676460461fb0b34756b3)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[fb8bd90f83c4dd86bc7fdae406152d63c5852f92,03244b8713d044425db5dbee08037ecd79b684f9)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[fb8bd90f83c4dd86bc7fdae406152d63c5852f92,3a1caa886d41d9bcc9a402906336eda34a90d323)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[fb8bd90f83c4dd86bc7fdae406152d63c5852f92,dbad91a31c482063c0a87c90aa83c9001972c6ac)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[fb8bd90f83c4dd86bc7fdae406152d63c5852f92,e1c6c10a6a70a69e29b04fcc1ebe4b9bcbc7a49a)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "4.20"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,4.20)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.6.160,6.7.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.113,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.57,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.2.11,7.3.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.3,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[fb8bd90f83c4dd86bc7fdae406152d63c5852f92,605a59639abb9cb63cd7676460461fb0b34756b3)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[fb8bd90f83c4dd86bc7fdae406152d63c5852f92,03244b8713d044425db5dbee08037ecd79b684f9)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[fb8bd90f83c4dd86bc7fdae406152d63c5852f92,3a1caa886d41d9bcc9a402906336eda34a90d323)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[fb8bd90f83c4dd86bc7fdae406152d63c5852f92,dbad91a31c482063c0a87c90aa83c9001972c6ac)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[fb8bd90f83c4dd86bc7fdae406152d63c5852f92,e1c6c10a6a70a69e29b04fcc1ebe4b9bcbc7a49a)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "4.20"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,4.20)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.6.160,6.7.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.113,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.57,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.2.11,7.3.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.3,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-10-23T15:15:14.432692+00:00", "updated": "2026-10-29T14:30:16.094608+00:00", "vendors": ["linux", "linux$PRODUCT$linux", "linux$PRODUCT$linux_kernel"], "weaknesses": ["CWE-404", "CWE-459"]}