Back to CVE records
Not yet scoredPublished Dec 16, 2025

CVE-2025-68318clk: thead: th1520-ap: set all AXI clocks to CLK_IS_CRITICAL

Updated under an hour ago ()

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

In the Linux kernel, the following vulnerability has been resolved: clk: thead: th1520-ap: set all AXI clocks to CLK_IS_CRITICAL The AXI crossbar of TH1520 has no proper timeout handling, which means gating AXI clocks can easily lead to bus timeout and thus system hang. Set all AXI clock gates to CLK_IS_CRITICAL. All these clock gates are ungated by default on system reset. In addition, convert all current CLK_IGNORE_UNUSED usage to CLK_IS_CRITICAL to prevent unwanted clock gating.

CVSS
Not yet scored
Weakness (CWE)
Not given
Known exploited
Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days)
Not loaded for this CVE
Assigned by
Linux
NVD analysis
Deferred
Record last updated
Oct 21, 2026
First seen by InfoSec Signals
Oct 9, 2026

Affected products

Affected products
Linux Linux
linux:linux (from the name)
from ae81b69fd2b1eb4885b352749b1fd1172e2f0f18 before d816c00bb69fb2eecd3fccac067857f3a0dbc44e; from ae81b69fd2b1eb4885b352749b1fd1172e2f0f18 before bdec5e01fc2f3114d1fb1daeb1000911d783c4ae; from ae81b69fd2b1eb4885b352749b1fd1172e2f0f18 before c567bc5fc68c4388c00e11fc65fd14fe86b52070
CNA record

References

References

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.