CVE-2026-15923 | ZephyrProject Zephyr up to 4.4.1 SDIO I/O subsys/sd/sdio.c sdio_io_rw_extended_helper infinite loop

September 14, 2026 Yanac

A vulnerability was found in ZephyrProject Zephyr up to 4.4.1. It has been rated as problematic. Affected by this issue is the function sdio_io_rw_extended_helper of the file subsys/sd/sdio.c of the component SDIO IO. The manipulation leads to infinite loop.

This vulnerability is listed as CVE-2026-15923. The attack must be carried out locally. There is no available exploit.

Upgrading the affected component is advised.VulDB Recent EntriesRead More