Bug 2439853 (CVE-2026-23116) - CVE-2026-23116 kernel: Kernel: Local denial of service via incorrect VPU power management on i.MX8MQ
Summary: CVE-2026-23116 kernel: Kernel: Local denial of service via incorrect VPU powe...
Keywords:
Status: NEW
Alias: CVE-2026-23116
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-02-14 16:01 UTC by OSIDB Bzimport
Modified: 2026-02-20 02:19 UTC (History)
0 users

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description OSIDB Bzimport 2026-02-14 16:01:52 UTC
In the Linux kernel, the following vulnerability has been resolved:

pmdomain: imx8m-blk-ctrl: Remove separate rst and clk mask for 8mq vpu

For i.MX8MQ platform, the ADB in the VPUMIX domain has no separate reset
and clock enable bits, but is ungated and reset together with the VPUs.
So we can't reset G1 or G2 separately, it may led to the system hang.
Remove rst_mask and clk_mask of imx8mq_vpu_blk_ctl_domain_data.
Let imx8mq_vpu_power_notifier() do really vpu reset.


Note You need to log in before you can comment on or make changes to this bug.