CVE-2026-23116

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2026-02-14 Modified: 2026-11-05 First seen: 2026-11-05 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx8m-blk-ctrl: Remove separate rst and clk mask for 8mq vpu For i.MX8MQ platform, the ADB in the VPUMIX domain has no separate reset and clock enable bits, but is ungated and reset together with the VPUs. So we can't reset G1 or G2 separately, it may led to the system hang. Remove rst_mask and clk_mask of imx8mq_vpu_blk_ctl_domain_data. Let imx8mq_vpu_power_notifier() do really vpu reset.

Affected Software (13)

VendorProductVersion
Linux Linux 608d7c325e855cb4a853afef3cd9f0df594bd12d < 8859e336d233e61a4c40d40dc6a9f21e8b9b719c
Linux Linux 608d7c325e855cb4a853afef3cd9f0df594bd12d < cad7003d951e8899db58ee2fef211586af726f09
Linux Linux 608d7c325e855cb4a853afef3cd9f0df594bd12d < 5c56a6f4b5a4f87c094c92a30fa17e28e37ec2ab
Linux Linux 608d7c325e855cb4a853afef3cd9f0df594bd12d < fd675de6bddf7e9bdf42ae3929d4c27ba6d1ef76
Linux Linux 608d7c325e855cb4a853afef3cd9f0df594bd12d < 3de49966499634454fd59e0e6fecd50baab7febd
Linux Linux 5.18
linux linux_kernel 5.18 – 6.1.162
linux linux_kernel 6.19
linux linux_kernel 6.19
linux linux_kernel 6.19
linux linux_kernel 6.19
linux linux_kernel 6.19
linux linux_kernel 6.19

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.14%
Raw Score 0.001360
Percentile 3.1%
Date 2026-11-14

EPSS Trend

2026-11-14
0.00136
2026-11-13
0.00136
2026-11-12
0.00136
2026-11-10
0.00136
2026-11-09
0.00133
2026-11-08
0.00133
2026-11-07
0.00133
2026-11-06
0.00133
2026-11-05
0.00133

Intelligence Sources

mitre ref →
nvd ref →