CVE-2026-43484

mmc: core: Avoid bitfield RMW for claim/retune flags

State: Published
Severity: Not scored
Published: May 13, 2026
Updated: May 13, 2026
Reserved: May 1, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

mmc: core: Avoid bitfield RMW for claim/retune flags

Move claimed and retune control flags out of the bitfield word to avoid unrelated RMW side effects in asynchronous contexts.

The host->claimed bit shared a word with retune flags. Writes to claimed in __mmc_claim_host() or retune_now in mmc_mq_queue_rq() can overwrite other bits when concurrent updates happen in other contexts, triggering spurious WARN_ON(!host->claimed). Convert claimed, can_retune, retune_now and retune_paused to bool to remove shared-word coupling.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	6c0cedd1ef9527ef13e66875746570e76a3188a7 to before 41dce4dae583a8ce06a7ebf4ce704c46a142957cAffected 6c0cedd1ef9527ef13e66875746570e76a3188a7 to before bb7fc2498c3bb25fa6a91f22f4760005325cfbd5Affected 6c0cedd1ef9527ef13e66875746570e76a3188a7 to before 270277c2ab631044867adb1bd2f2433d3892de6eAffected 6c0cedd1ef9527ef13e66875746570e76a3188a7 to before 45038e03f15e992c48603fff8c6b1c9be5397ac9Affected 6c0cedd1ef9527ef13e66875746570e76a3188a7 to before 0e06cc511c61cff1591e5435a207759adcc76b6dAffected 6c0cedd1ef9527ef13e66875746570e76a3188a7 to before d3a3caf44c8ec26f5d63dc17c1c7242effa60ebcAffected 6c0cedd1ef9527ef13e66875746570e76a3188a7 to before 901084c51a0a8fb42a3f37d2e9c62083c495f824Affected
LinuxLinux	4.15Affected before 4.15Not affected 5.15.203 through 5.15.Not affected 6.1.167 through 6.1.Not affected 6.6.130 through 6.6.Not affected 6.12.78 through 6.12.Not affected 6.18.19 through 6.18.Not affected 6.19.9 through 6.19.Not affected 7.0 and laterNot affected

Product

Versions

LinuxLinux

6c0cedd1ef9527ef13e66875746570e76a3188a7 to before 41dce4dae583a8ce06a7ebf4ce704c46a142957cAffected
6c0cedd1ef9527ef13e66875746570e76a3188a7 to before bb7fc2498c3bb25fa6a91f22f4760005325cfbd5Affected
6c0cedd1ef9527ef13e66875746570e76a3188a7 to before 270277c2ab631044867adb1bd2f2433d3892de6eAffected
6c0cedd1ef9527ef13e66875746570e76a3188a7 to before 45038e03f15e992c48603fff8c6b1c9be5397ac9Affected
6c0cedd1ef9527ef13e66875746570e76a3188a7 to before 0e06cc511c61cff1591e5435a207759adcc76b6dAffected
6c0cedd1ef9527ef13e66875746570e76a3188a7 to before d3a3caf44c8ec26f5d63dc17c1c7242effa60ebcAffected
6c0cedd1ef9527ef13e66875746570e76a3188a7 to before 901084c51a0a8fb42a3f37d2e9c62083c495f824Affected

LinuxLinux

4.15Affected
before 4.15Not affected
5.15.203 through 5.15.*Not affected
6.1.167 through 6.1.*Not affected
6.6.130 through 6.6.*Not affected
6.12.78 through 6.12.*Not affected
6.18.19 through 6.18.*Not affected
6.19.9 through 6.19.*Not affected
7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.