CVEFinder.io

CVE-2026-43484

🔶 medium
🔍 Scan for this CVE
Summary

In the Linux kernel, the following vulnerability has been resolved: mmc: core: Avoid bitfield RMW for claim/retune flags Move claimed and retune control flags out of the bitfield word to avoid unrelated RMW side effects in asynchronous contexts. The host->claimed bit shared a word with retune flags. Writes to claimed in __mmc_claim_host() or retune_now in mmc_mq_queue_rq() can overwrite other bits when concurrent updates happen in other contexts, triggering spurious WARN_ON(!host->claimed). C

Description

In the Linux kernel, the following vulnerability has been resolved:

mmc: core: Avoid bitfield RMW for claim/retune flags

Move claimed and retune control flags out of the bitfield word to
avoid unrelated RMW side effects in asynchronous contexts.

The host->claimed bit shared a word with retune flags. Writes to claimed
in __mmc_claim_host() or retune_now in mmc_mq_queue_rq() can overwrite
other bits when concurrent updates happen in other contexts, triggering
spurious WARN_ON(!host->claimed). Convert claimed, can_retune,
retune_now and retune_paused to bool to remove shared-word coupling.

CVSS Score
5.5
Medium
EPSS Score
0.1
Exploit Probability
Published Date
2026-05-13
First Seen: 2026-05-23
📊 Relative Risk Intelligence

This CVE is Lower Risk - more severe than 31.3% of all 364,858 vulnerabilities in our database.

#250,686
Below average severity
Severity Percentile
Last Modified 2026-06-26
Source NVD 🔗
CVSS Vector 3.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

📦 Affected Products 7

🔗 References 7

🔗 Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2026-98164 🔶 medium 5.5 0.2 In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Check write tracking in all address s... 2026-09-29
CVE-2026-98163 ⚠️ high 7.0 0.1 In the Linux kernel, the following vulnerability has been resolved: cgroup: Avoid iteration of dying tasks with zero re... 2026-09-26
CVE-2026-98062 🔶 medium 5.5 0.1 In the Linux kernel, the following vulnerability has been resolved: bpf: Mark signal tracepoint siginfo arguments as sc... 2026-09-25
CVE-2026-98109 🔶 medium 4.7 0.1 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Fix race condition during devi... 2026-09-25
CVE-2026-98115 ⚠️ high 8.8 0.3 In the Linux kernel, the following vulnerability has been resolved: ksmbd: safely drain sessions during logoff SMB3 mu... 2026-09-25
CVE-2026-98152 🔶 medium 5.5 0.1 In the Linux kernel, the following vulnerability has been resolved: nvmet-rdma: fix queue leak when connect backlog is ... 2026-09-25
These CVEs affect the same products