{"affected":[{"defaultStatus":"unaffected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"lessThan":"41dce4dae583a8ce06a7ebf4ce704c46a142957c","status":"affected","version":"6c0cedd1ef9527ef13e66875746570e76a3188a7","versionType":"git"},{"lessThan":"bb7fc2498c3bb25fa6a91f22f4760005325cfbd5","status":"affected","version":"6c0cedd1ef9527ef13e66875746570e76a3188a7","versionType":"git"},{"lessThan":"270277c2ab631044867adb1bd2f2433d3892de6e","status":"affected","version":"6c0cedd1ef9527ef13e66875746570e76a3188a7","versionType":"git"},{"lessThan":"45038e03f15e992c48603fff8c6b1c9be5397ac9","status":"affected","version":"6c0cedd1ef9527ef13e66875746570e76a3188a7","versionType":"git"},{"lessThan":"0e06cc511c61cff1591e5435a207759adcc76b6d","status":"affected","version":"6c0cedd1ef9527ef13e66875746570e76a3188a7","versionType":"git"},{"lessThan":"d3a3caf44c8ec26f5d63dc17c1c7242effa60ebc","status":"affected","version":"6c0cedd1ef9527ef13e66875746570e76a3188a7","versionType":"git"},{"lessThan":"901084c51a0a8fb42a3f37d2e9c62083c495f824","status":"affected","version":"6c0cedd1ef9527ef13e66875746570e76a3188a7","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"status":"affected","version":"4.15"},{"lessThan":"4.15","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.203","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.167","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.130","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.78","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.19","versionType":"semver"},{"lessThanOrEqual":"6.19.*","status":"unaffected","version":"6.19.9","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.0","versionType":"original_commit_for_fix"}]}],"cveId":"CVE-2026-43484","cwes":[],"description":"In the Linux kernel, the following vulnerability has been resolved:\n\nmmc: core: Avoid bitfield RMW for claim/retune flags\n\nMove claimed and retune control flags out of the bitfield word to\navoid unrelated RMW side effects in asynchronous contexts.\n\nThe host->claimed bit shared a word with retune flags. Writes to claimed\nin __mmc_claim_host() or retune_now in mmc_mq_queue_rq() can overwrite\nother bits when concurrent updates happen in other contexts, triggering\nspurious WARN_ON(!host->claimed). Convert claimed, can_retune,\nretune_now and retune_paused to bool to remove shared-word coupling.","epss":{"date":"2026-11-06","percentile":0.01496,"score":0.00114},"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793979777242,"publishedAt":1778684910919,"references":[{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/41dce4dae583a8ce06a7ebf4ce704c46a142957c"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/bb7fc2498c3bb25fa6a91f22f4760005325cfbd5"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/270277c2ab631044867adb1bd2f2433d3892de6e"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/45038e03f15e992c48603fff8c6b1c9be5397ac9"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/0e06cc511c61cff1591e5435a207759adcc76b6d"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/d3a3caf44c8ec26f5d63dc17c1c7242effa60ebc"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/901084c51a0a8fb42a3f37d2e9c62083c495f824"}],"remediation":[],"revision":"27a26a4657cd544f63e77bb48e6474bce99fd3a6936b805f966307b412d6edd4","sources":[{"modifiedAt":1793979777242,"name":"CNA: Linux","retrievedAt":1793981729173,"url":"https://www.cve.org/CVERecord?id=CVE-2026-43484"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793981729753,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-43484"}],"ssvc":{"assessedAt":1793979659499,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"mmc: core: Avoid bitfield RMW for claim/retune flags","updatedAt":1793981729753}