In the Linux kernel, the following vulnerability has been resolved:
mmc: dw_mmc-rockchip: Add missing private data for very old controllers
The really old controllers (rk2928, rk3066, rk3188) do not support UHS speeds at all, and thus never handled phase data.
For that reason it never had a parse_dt callback and no driver private data at all.
Commit ff6f0286c896 ("mmc: dw_mmc-rockchip: Add memory clock auto-gating support") makes the private data sort of mandatory, because the init function checks whether phases are configured internally or through the clock controller.
This results in the old SoCs then experiencing NULL-pointer dereferences when they try to access that private-data struct.
While we could have if (priv) conditionals in all places, it's way less cluttery to just give the old types their private-data struct.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Ubuntu | — | Upgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-realtimeUpgrade linux-image-generic-7.0Upgrade linux-image-7.0.0-1006-gke-64kUpgrade linux-image-7.0.0-1018-nvidiaUpgrade linux-image-awsUpgrade linux-image-azure-7.0Upgrade linux-image-oracle-64kUpgrade linux-image-oem-26.04Upgrade linux-image-oracle-7.0Upgrade linux-image-nvidia-64kUpgrade linux-image-7.0.0-2018-nvidia-bosUpgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-gcpUpgrade linux-image-oracle-64k-7.0Upgrade linux-image-7.0.0-1012-aws-64kUpgrade linux-image-7.0.0-1013-ibmUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-7.0.0-2018-nvidia-bos-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-virtual-7.0Upgrade linux-image-7.0.0-31-genericUpgrade linux-image-generic-64k-7.0Upgrade linux-image-nvidia-bos-64kUpgrade linux-image-azureUpgrade linux-image-nvidia-7.0Upgrade linux-image-virtual-hwe-26.04Upgrade linux-image-nvidia-bos-64k-7.0Upgrade linux-image-raspi-realtimeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-realtime-hwe-26.04Upgrade linux-image-virtualUpgrade linux-image-oracleUpgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-generic-hwe-26.04Upgrade linux-image-7.0.0-1011-oracleUpgrade linux-image-oem-7.0Upgrade linux-image-raspi-7.0Upgrade linux-image-realtime-64kUpgrade linux-image-ibmUpgrade linux-image-7.0.0-1011-oracle-64kUpgrade linux-image-gkeUpgrade linux-image-nvidia-bos-7.0Upgrade linux-image-7.0.0-31-realtimeUpgrade linux-image-7.0.0-1018-nvidia-64kUpgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-realtime-64k-7.0Upgrade linux-image-gke-hwe-26.04Upgrade linux-image-aws-7.0Upgrade linux-image-aws-64k-7.0Upgrade linux-image-aws-64kUpgrade linux-image-7.0.0-1019-raspiUpgrade linux-image-gke-64kUpgrade linux-image-gcp-64kUpgrade linux-image-7.0.0-1019-raspi-realtimeUpgrade linux-image-ibm-7.0Upgrade linux-image-generic-64kUpgrade linux-image-gke-7.0Upgrade linux-image-gcp-64k-7.0Upgrade linux-image-7.0.0-1014-azureUpgrade linux-image-7.0.0-1013-oemUpgrade linux-image-oem-26.04aUpgrade linux-image-nvidia-64k-7.0Upgrade linux-image-realtime-7.0Upgrade linux-image-nvidia-bosUpgrade linux-image-genericUpgrade linux-image-azure-lts-26.04Upgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-7.0.0-31-generic-64kUpgrade linux-image-7.0.0-31-realtime-64kUpgrade linux-image-raspi-realtime-7.0Upgrade linux-image-gke-64k-7.0Upgrade linux-image-7.0.0-1012-awsUpgrade linux-image-raspiUpgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-oem-26.04bUpgrade linux-image-nvidiaUpgrade linux-image-7.0.0-1006-gkeUpgrade linux-image-gcp-7.0 | Sep 14, 2026 | Sep 7, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 13, 2026 | Jun 25, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub