CVE-2026-53152

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the dw mmc-rockchip driver where older controllers (rk2928, rk3066, rk3188) lack driver private data because they do not support UHS speeds and do not handle phase data. A subsequent update introducing memory clock auto-gating support made this private data mandatory during the initialization function's check of phase configurations. Consequently, these older SoCs experience NULL-pointer dereferences when attempting to access the missing private-data structure.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.