Vulnerability · CVE-2026-99034

mmc: sdhci-sprd: disable runtime PM on remove

Published Oct 23, 2026 · catalog updated Oct 28, 2026 · Linux Linux

Last checked Nov 3, 2026. A connected source was read within the last 7 days.

Check if you run it

No confirmed exploitation is on record for CVE-2026-99034. EPSS is 0.18%. Act only if a listed version of Linux Linux is installed.

Gaps on this record

No vendor fix or required action is stored. Compare the linked advisory before you change production.

Same product and reporting

CVE-2026-99260 · Medium
CVE-2026-99259 · Medium
CVE-2026-99258 · High
CVE-2026-99257 · Medium
CVE-2026-99255 · Medium

Severity: Medium—
Known exploitation: Not in CISA/VulnCheck KEV
EPSS: 0.18%
Remediation: Advisory link
Affected products: Ubuntu:16.04:LTS linux-hwe-edge · Ubuntu:18.04:LTS linux-aws-5.0 · Ubuntu:18.04:LTS linux-aws-5.3 · Ubuntu:18.04:LTS linux-azure · Ubuntu:18.04:LTS linux-azure-5.3 · Ubuntu:18.04:LTS linux-azure-edge

In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-sprd: disable runtime PM on remove sdhci_sprd_probe() enables runtime PM, while sdhci_sprd_remove() does not perform the corresponding runtime PM cleanup. The probe failure path disables runtime PM before disabling the clocks, but the normal remove path directly disables clocks that are also managed by the runtime PM callbacks. If the device is runtime suspended, those clocks may already be disabled. Resume the device before removal, disable runtime PM and drop the temporary runtime PM reference before disabling the clocks. This issue was found by manual code inspection.

Are you affected?

Enter the version you run. The result uses only the ranges stored on this record.

The check returns affected, not affected, or incomplete. It does not guess a version that is missing from the record.

Ubuntu:16.04:LTS linux-hwe-edge4.8.0-28.30~16.04.1, 4.8.0-30.32~16.04.1, 4.8.0-32.34~16.04.1
Ubuntu:18.04:LTS linux-aws-5.05.0.0-1021.24~18.04.1, 5.0.0-1022.25~18.04.1, 5.0.0-1023.26~18.04.1
Ubuntu:18.04:LTS linux-aws-5.35.3.0-1016.17~18.04.1, 5.3.0-1017.18~18.04.1, 5.3.0-1019.21~18.04.1
Ubuntu:18.04:LTS linux-azure4.15.0-1002.2, 4.15.0-1003.3, 4.15.0-1004.4
Ubuntu:18.04:LTS linux-azure-5.35.3.0-1007.8~18.04.1, 5.3.0-1008.9~18.04.1, 5.3.0-1009.10~18.04.1
Ubuntu:18.04:LTS linux-azure-edge4.18.0-1006.6~18.04.1, 4.18.0-1007.7~18.04.1, 4.18.0-1008.8~18.04.1
Ubuntu:18.04:LTS linux-gcp4.15.0-1001.1, 4.15.0-1003.3, 4.15.0-1005.5
Ubuntu:18.04:LTS linux-gcp-5.35.3.0-1008.9~18.04.1, 5.3.0-1009.10~18.04.1, 5.3.0-1010.11~18.04.1
Ubuntu:18.04:LTS linux-gke-4.154.15.0-1030.32, 4.15.0-1032.34, 4.15.0-1033.35
Ubuntu:Pro:18.04:LTS linux-aws-5.45.4.0-1018.18~18.04.1, 5.4.0-1020.20~18.04.2, 5.4.0-1022.22~18.04.1
Ubuntu:Pro:18.04:LTS linux-azure-5.45.4.0-1020.20~18.04.1, 5.4.0-1022.22~18.04.1, 5.4.0-1023.23~18.04.1
Ubuntu:Pro:18.04:LTS linux-gcp-5.45.4.0-1019.19~18.04.2, 5.4.0-1021.21~18.04.1, 5.4.0-1022.22~18.04.1
vendor Linux Linuxversion unspecified

How to fix CVE-2026-99034

No stored fix
No vendor fix text is stored. Use the linked advisory before you change production.
Version check
Seen in 4.8.0-28.30~16.04.1 · 17 other packages on the advisory
Advisory
Open the cve_org record and follow its fix.
Official advisories

What to do

Three questions, each answered from this record only. Confirm the vendor advisory before you patch.

Should you patch?

No confirmed exploitation is on record for CVE-2026-99034. EPSS is 0.18%. Act only if a listed version of Linux Linux is installed.

Which versions are affected?

Compare what you have installed with 4.8.0-28.30~16.04.1, 4.8.0-30.32~16.04.1, 4.8.0-32.34~16.04.1, 5.0.0-1021.24~18.04.1, 5.0.0-1022.25~18.04.1, 5.0.0-1023.26~18.04.1, 5.3.0-1016.17~18.04.1, 5.3.0-1017.18~18.04.1, 5.3.0-1019.21~18.04.1, 4.15.0-1002.2, 4.15.0-1003.3, 4.15.0-1004.4, 5.3.0-1007.8~18.04.1, 5.3.0-1008.9~18.04.1, 5.3.0-1009.10~18.04.1, 4.18.0-1006.6~18.04.1, 4.18.0-1007.7~18.04.1, 4.18.0-1008.8~18.04.1. Compare the installed version with the linked vendor advisory before you change production.

What should an analyst verify?

No weakness class is stored. EPSS 0.18%. There is no CISA KEV listing. No Exploit-DB or Metasploit reference is linked. Use the source links for the original advisory.

Technology hubs

Ubuntu security

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

Oct 23, 2026 · Tenable CVE Database
Detected
In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-sprd: disable runtime PM on remove sdhci_sprd_probe() enables runtime PM, while sdhci_sprd_remove() does not perform the corresponding runtime PM cleanup. The probe failure path disables runtime PM before disabling the clocks, but the normal remove path directly disables clocks that are also managed by the runtime PM ca
Oct 23, 2026 · CVE.org
Updated
In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-sprd: disable runtime PM on remove sdhci_sprd_probe() enables runtime PM, while sdhci_sprd_remove() does not perform the corresponding runtime PM cleanup. The probe failure path disables runtime PM before disabling the clocks, but the normal remove path directly disables clocks that are also managed by the runtime PM ca
Oct 28, 2026 · OpenSSF OSV / OSV Scanner
Updated
In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-sprd: disable runtime PM on remove sdhci_sprd_probe() enables runtime PM, while sdhci_sprd_remove() does not perform the corresponding runtime PM cleanup. The probe failure path disables runtime PM before disabling the clocks, but the normal remove path directly disables clocks that are also managed by the runtime PM ca

Sources

CVE.orgVulnerability recordCVE-2026-99034
In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-sprd: disable runtime PM on remove sdhci_sprd_probe() enables runtime PM, while sdhci_sprd_remove() does not perform the corresponding runtime PM cleanup. The probe failure path disables runtime PM bef
cve.org
FIRST EPSSExploitation probabilityCVE-2026-99034
30-day exploitation probability 0.18%
first.org
OpenSSF OSV / OSV ScannerPackage advisoryUBUNTU-CVE-2026-99034
osv.dev
Tenable CVE DatabaseVulnerability recordCVE-2026-99034
In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-sprd: disable runtime PM on remove sdhci_sprd_probe() enables runtime PM, while sdhci_sprd_remove() does not perform the corresponding runtime PM cleanup. The probe failure path disables runtime PM before disabling the clocks, but the normal remove path directly disables clocks that are also managed by the runtime PM ca
tenable.com

References

Freshness

Last verified in this catalog Nov 3, 2026. Significant claims (KEV, EPSS, CVSS, affected ranges) come from the source rows above — open the original publisher for the authoritative advisory.

FIRST EPSSOct 31, 2026
OpenSSF OSV / OSV ScannerOct 28, 2026
CVE.orgOct 25, 2026
Tenable CVE DatabaseOct 23, 2026

Priority score

12/100

Evidence confidence: High

Several independent sources name this vulnerability.

Confirmed exploitation0/30
EPSS probability1/20
CVSS severity0/15
Public exploit0/10
Internet exposure6/10
Product prevalence5/5
Detection0/5
Threat research0/5

Decision signals

Four separate signals — do not infer one from another.

Medium

CVSS severity
—
Technical impact. Not stored yet.
EPSS probability
0.18% · p7.29%
Estimated probability of exploitation within 30 days (FIRST).
Known exploitation
No verified KEV listing
Evidence from CISA KEV or VulnCheck KEV only — not from EPSS alone.
Patch availability
Advisory link
A patch or advisory reference is linked. Open the original publisher for availability by product version.

Stacks

Linux Ubuntu Ubuntu 16.04 Ubuntu 18.04

Watch

A free account watches 5 technologies and gets a weekly digest. Professional adds immediate alerts.