CVE-2026-53152

Source
https://cve.org/CVERecord?id=CVE-2026-53152
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-53152.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-53152
Downstream
Related
Published
2026-06-25T08:38:36.850Z
Modified
2026-07-08T08:09:46.036952122Z
Summary
mmc: dw_mmc-rockchip: Add missing private data for very old controllers
Details

In the Linux kernel, the following vulnerability has been resolved:

mmc: dw_mmc-rockchip: Add missing private data for very old controllers

The really old controllers (rk2928, rk3066, rk3188) do not support UHS speeds at all, and thus never handled phase data.

For that reason it never had a parse_dt callback and no driver private data at all.

Commit ff6f0286c896 ("mmc: dw_mmc-rockchip: Add memory clock auto-gating support") makes the private data sort of mandatory, because the init function checks whether phases are configured internally or through the clock controller.

This results in the old SoCs then experiencing NULL-pointer dereferences when they try to access that private-data struct.

While we could have if (priv) conditionals in all places, it's way less cluttery to just give the old types their private-data struct.

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53152.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
7457b35afafef5195a498d13b3e05f4258beeecc
Fixed
b1180ff50cca48807893ecde7d1f81d573c88c85
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
5b58ba042e2379f4c01da3211fd17dbdc983c2ac
Fixed
7f8007be13e6cc1e0a508fe461f9a91ba9a28b8c
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
ff6f0286c896f062853552097220dd93961be9c4
Fixed
8d9eca906e76d3dd40e5f2c79701f066678f2e62
Fixed
1e9a4850afa0ceb63984fb1a9f3e86d0fc4fd18f
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6.12.78
Fixed
6.12.94
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6.18.19
Fixed
6.18.36

Affected versions

v6.*
v6.12.78
v6.12.79
v6.12.80
v6.12.81
v6.12.82
v6.12.83
v6.12.84
v6.12.85
v6.12.86
v6.12.87
v6.12.88
v6.12.89
v6.12.90
v6.12.91
v6.12.92
v6.12.93
v6.18.19
v6.18.20
v6.18.21
v6.18.22
v6.18.23
v6.18.24
v6.18.25
v6.18.26
v6.18.27
v6.18.28
v6.18.29
v6.18.30
v6.18.31
v6.18.32
v6.18.33
v6.18.34
v6.18.35

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-53152.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
6.12.94
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.36
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.0.13

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-53152.json"