CVE-2026-23116pmdomain: imx8m-blk-ctrl: Remove separate rst and clk mask for 8mq vpu
Updated under an hour ago ()
Does this affect you?
It affects Linux and 1 other product. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx8m-blk-ctrl: Remove separate rst and clk mask for 8mq vpu For i.MX8MQ platform, the ADB in the VPUMIX domain has no separate reset and clock enable bits, but is ungated and reset together with the VPUs. So we can't reset G1 or G2 separately, it may led to the system hang. Remove rst_mask and clk_mask of imx8mq_vpu_blk_ctl_domain_data. Let imx8mq_vpu_power_notifier() do really vpu reset.
- CVSS
- 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Analyzed
- Record last updated
- May 11, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 608d7c325e855cb4a853afef3cd9f0df594bd12d before 8859e336d233e61a4c40d40dc6a9f21e8b9b719c; from 608d7c325e855cb4a853afef3cd9f0df594bd12d before cad7003d951e8899db58ee2fef211586af726f09; 608d7c325e855cb4a853afef3cd9f0df594bd12d builds before 5c56a6f4b5a4f87c094c92a30fa17e28e37ec2ab; from 608d7c325e855cb4a853afef3cd9f0df594bd12d before fd675de6bddf7e9bdf42ae3929d4c27ba6d1ef76; 608d7c325e855cb4a853afef3cd9f0df594bd12d builds before 3de49966499634454fd59e0e6fecd50baab7febd | CNA record |
linux linux_kernel linux:linux_kernel | from 5.18 before 6.1.162; from 6.2 before 6.6.122; from 6.7 before 6.12.68; from 6.13 before 6.18.8; 6.19; 6.19; 6.19; 6.19; and 2 more ranges | NVD |
References
- https://git.kernel.org/stable/c/8859e336d233e61a4c40d40dc6a9f21e8b9b719cpatch
- https://git.kernel.org/stable/c/cad7003d951e8899db58ee2fef211586af726f09patch
- https://git.kernel.org/stable/c/5c56a6f4b5a4f87c094c92a30fa17e28e37ec2abpatch
- https://git.kernel.org/stable/c/fd675de6bddf7e9bdf42ae3929d4c27ba6d1ef76patch
- https://git.kernel.org/stable/c/3de49966499634454fd59e0e6fecd50baab7febdpatch
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.