The Linux kernel vulnerability CVE-2026-68465 affects the mmc: sdhci-esdhc-imx driver. The esdhc_change_pinstate() function previously checked for pins_100mhz and pins_200mhz at the start and returned -EINVAL if either was not defined, preventing the default pin state restoration path from executing. This caused devices with a sleep pinctrl state but lacking high-speed pin states to fail to restore their default pin configuration. The patch corrects this by relocating the IS_ERR checks for pins_100mhz and pins_200mhz into their respective switch cases, enabling the default case to be reached and the default pin state to be restored properly.

Devices using the affected driver and lacking high-speed pin states could not restore their default pin configuration after sleep, potentially causing malfunction or degraded operation related to pin state management. No known exploits in the wild have been reported. The impact is limited to hardware pin state restoration functionality within the affected driver.

A fix has been implemented to address this vulnerability by modifying the esdhc_change_pinstate() function to correctly handle pin state restoration. Users should apply the official Linux kernel update that includes this patch. Since this is a kernel-level fix, updating to a kernel version containing this correction is the recommended remediation. Patch status is not explicitly confirmed in the provided data; users should consult the vendor or Linux kernel advisory for the exact fixed version and update accordingly.