Impact
The kernel driver for the SDHCI ESdhc imx controller fails to disable the uSDHC interrupt when the system enters suspend if the device cannot wake the system. When WiFi performs an out‑of‑band wake‑up, the hardware sends a Card interrupt before the uSDHC has fully resumed. Because the interrupt line remains active, the driver receives an IRQ that it cannot handle, which results in a "irq xxx: nobody cared" warning. This is an interrupt‑handling flaw that can destabilise the operating system and potentially cause a denial of service or a crash if the unhandled interrupt propagates further.
Affected Systems
All Linux kernel versions containing the older sdhci‑esdhc‑imx driver prior to the commit that disables the interrupt during suspend are affected. Since the exact version range is not published, any kernel build that predates commit 4f96903e2fd228aa96013372402d650f6dbe5cb3 is considered vulnerable.
Risk and Exploitability
The CVSS score is not provided and the EPSS score is unavailable; the vulnerability is not listed in the CISA KEV catalog. Exploitation would require the system to be in suspend state and the WiFi interface to perform an out‑of‑band wake‑up, so the attack surface is limited. Nonetheless, because the bug can be triggered automatically by normal hardware operation and produces a warning and possible instability, the risk is considered moderate rather than critical.
OpenCVE Enrichment