CVEFinder.io

CVE-2026-43484

🔶 medium
Summary

In the Linux kernel, the following vulnerability has been resolved: mmc: core: Avoid bitfield RMW for claim/retune flags Move claimed and retune control flags out of the bitfield word to avoid unrelated RMW side effects in asynchronous contexts. The host->claimed bit shared a word with retune flags. Writes to claimed in __mmc_claim_host() or retune_now in mmc_mq_queue_rq() can overwrite other bits when concurrent updates happen in other contexts, triggering spurious WARN_ON(!host->claimed). C

Description

In the Linux kernel, the following vulnerability has been resolved:

mmc: core: Avoid bitfield RMW for claim/retune flags

Move claimed and retune control flags out of the bitfield word to
avoid unrelated RMW side effects in asynchronous contexts.

The host->claimed bit shared a word with retune flags. Writes to claimed
in __mmc_claim_host() or retune_now in mmc_mq_queue_rq() can overwrite
other bits when concurrent updates happen in other contexts, triggering
spurious WARN_ON(!host->claimed). Convert claimed, can_retune,
retune_now and retune_paused to bool to remove shared-word coupling.

CVSS Score
5.5
Medium
EPSS Score
0.1
Exploit Probability
Published Date
2026-05-13
First Seen: 2026-05-23
📊 Relative Risk Intelligence

This CVE is Lower Risk - more severe than 31.3% of all 365,890 vulnerabilities in our database.

#251,398
Below average severity
Severity Percentile
Last Modified 2026-06-26
Source NVD 🔗
CVSS Vector 3.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

📦 Affected Products 7

🔗 References 7

🔗 Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2026-98164 ⚠️ high 7.1 0.2 In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Check write tracking in all address s... 2026-09-29
CVE-2026-98163 ⚠️ high 7.8 0.1 In the Linux kernel, the following vulnerability has been resolved: cgroup: Avoid iteration of dying tasks with zero re... 2026-09-26
CVE-2026-98162 🔶 medium 5.5 0.1 In the Linux kernel, the following vulnerability has been resolved: smb/server: fix tree connection leak in smb2_tree_c... 2026-09-25
CVE-2026-98161 🔶 medium 5.5 0.1 In the Linux kernel, the following vulnerability has been resolved: nvdimm: pmem: keep PREFLUSH before data writes pme... 2026-09-25
CVE-2026-98160 🔶 medium 5.5 0.1 In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix mismatched free of HalData ... 2026-09-25
CVE-2026-100079 🔶 medium 5.5 0.1 In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: unregister debugfs entries on tea... 2026-09-25
These CVEs affect the same products