CVE-2026-68465: mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore

From: Greg Kroah-Hartman <[email protected]>

Description
===========

In the Linux kernel, the following vulnerability has been resolved:

mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore

esdhc_change_pinstate() checks for pins_100mhz and pins_200mhz at the
top of the function and returns -EINVAL if either is not defined. This
prevents the default case from ever being reached, which means devices
with a sleep pinctrl state but without high-speed pin states (100mhz/
200mhz) can never restore their default pin configuration.

Move the IS_ERR checks for pins_100mhz and pins_200mhz into their
respective switch cases.

The Linux kernel CVE team has assigned CVE-2026-68465 to this issue.


Affected and fixed versions
===========================

	Issue introduced in 6.16 with commit 676a83855614635af3bf31ad3f8fec4031f81354 and fixed in 6.18.40 with commit aa276aa6cbfbc5622bf974cf9be1d579ce4a5fab
	Issue introduced in 6.16 with commit 676a83855614635af3bf31ad3f8fec4031f81354 and fixed in 7.1.5 with commit bb72b2398c05fd0a4ebf13f49c7d599d7023d484
	Issue introduced in 6.16 with commit 676a83855614635af3bf31ad3f8fec4031f81354 and fixed in 7.2-rc4 with commit 5adc14cd4b905629d5b9163b3a416dcab24c7ce2

Please see https://www.kernel.org for a full list of currently supported
kernel versions by the kernel community.

Unaffected versions might change over time as fixes are backported to
older supported kernel versions.  The official CVE entry at
	https://cve.org/CVERecord/?id=CVE-2026-68465
will be updated if fixes are backported, please check that for the most
up to date information about this issue.


Affected files
==============

The file(s) affected by this issue are:
	drivers/mmc/host/sdhci-esdhc-imx.c


Mitigation
==========

The Linux kernel CVE team recommends that you update to the latest
stable kernel version for this, and many other bugfixes.  Individual
changes are never tested alone, but rather are part of a larger kernel
release.  Cherry-picking individual commits is not recommended or
supported by the Linux kernel community at all.  If however, updating to
the latest release is impossible, the individual changes to resolve this
issue can be found at these commits:
	https://git.kernel.org/stable/c/aa276aa6cbfbc5622bf974cf9be1d579ce4a5fab
	https://git.kernel.org/stable/c/bb72b2398c05fd0a4ebf13f49c7d599d7023d484
	https://git.kernel.org/stable/c/5adc14cd4b905629d5b9163b3a416dcab24c7ce2