Riskcovery

CVE-2025-71200

mmc: sdhci-of-dwcmshc: Prevent illegal clock reduction in HS200/HS400 mode

State
Published
Severity
Not scored
Published
Feb 14, 2026
Updated
May 11, 2026
Reserved
Jan 31, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

mmc: sdhci-of-dwcmshc: Prevent illegal clock reduction in HS200/HS400 mode

When operating in HS200 or HS400 timing modes, reducing the clock frequency below 52MHz will lead to link broken as the Rockchip DWC MSHC controller requires maintaining a minimum clock of 52MHz in these modes.

Add a check to prevent illegal clock reduction through debugfs:

root@debian:/# echo 50000000 > /sys/kernel/debug/mmc0/clock root@debian:/# [ 30.090146] mmc0: running CQE recovery mmc0: cqhci: Failed to halt mmc0: cqhci: spurious TCN for tag 0 WARNING: drivers/mmc/host/cqhci-core.c:797 at cqhci_irq+0x254/0x818, CPU#1: kworker/1:0H/24 Modules linked in: CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0H Not tainted 6.19.0-rc1-00001-g09db0998649d-dirty #204 PREEMPT Hardware name: Rockchip RK3588 EVB1 V10 Board (DT) Workqueue: kblockd blk_mq_run_work_fn pstate: 604000c9 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : cqhci_irq+0x254/0x818 lr : cqhci_irq+0x254/0x818 ...

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • c6f361cba51c536e7a6af31973c6a4e5d7e4e2e4 to before 59b8a1ca6df4db2ca250e9eeab74e2b0068d69e9Affected
  • c6f361cba51c536e7a6af31973c6a4e5d7e4e2e4 to before f2677d6e2bbc5ba2030825522d2afd0542b038a3Affected
  • c6f361cba51c536e7a6af31973c6a4e5d7e4e2e4 to before de0ad7156036a50982bcb75a080e4af284502be2Affected
  • c6f361cba51c536e7a6af31973c6a4e5d7e4e2e4 to before 36be050f21dea7a3a76dff5a031da6274e8ee468Affected
  • c6f361cba51c536e7a6af31973c6a4e5d7e4e2e4 to before 3009738a855cf938bbfc9078bec725031ae623a4Affected
LinuxLinux
  • 6.0Affected
  • before 6.0Not affected
  • 6.1.162 through 6.1.*Not affected
  • 6.6.122 through 6.6.*Not affected
  • 6.12.68 through 6.12.*Not affected
  • 6.18.8 through 6.18.*Not affected
  • 6.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.