The esdhc_change_pinstate() function in the Linux kernel incorrectly enforces early error checks on the 100MHz and 200MHz pin state handles, causing the function to return an error before reaching the default pin‑state restoration logic. When hardware drivers use a sleep pinctrl state but do not provide high‑speed pin states, the default configuration cannot be restored after a sleep transition, which can leave the SD/eSDHC interface permanently misconfigured or inactive. The failure manifests as a local service outage for the affected device, potentially preventing the system from reading or writing to the SD card after power‑down cycles or manual sleep commands.

All Linux kernel installations that contain the sdhci‑esdhc‑imx driver before the patch commit, across any distribution or custom build, are vulnerable if the underlying hardware relies on automatic pin state restoration and lacks 100MHz or 200MHz definitions. The issue is tied to the kernel source version, not a specific vendor or product line.

The EPSS score is unavailable and the vulnerability is not listed in CISA KEV; no public exploit documentation exists. The flaw requires local access to modify pinctrl settings or trigger a power cycle that invokes the failed restoration logic. Because the code path is not exposed over a network interface, the primary risk is a local denial of service that affects device functionality but does not provide remote compromise. Applying the updated kernel code eliminates the risk entirely.