CVE-2026-23116
MEDIUMLinux Kernel 5.18.0-6.1.161, 6.2.0-6.6.121, 6.7.0-6.12.67, 6.13.0-6.18.7 - Denial of Service via VPU Reset Handling
Title source: llmDescription
In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx8m-blk-ctrl: Remove separate rst and clk mask for 8mq vpu For i.MX8MQ platform, the ADB in the VPUMIX domain has no separate reset and clock enable bits, but is ungated and reset together with the VPUs. So we can't reset G1 or G2 separately, it may led to the system hang. Remove rst_mask and clk_mask of imx8mq_vpu_blk_ctl_domain_data. Let imx8mq_vpu_power_notifier() do really vpu reset.
References (5)
Core 5
Core References
Scores
CVSS v3
5.5
EPSS
0.0002
EPSS Percentile
4.7%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Details
Status
published
Products (18)
linux/Kernel
5.18.0 - 6.1.162linux
linux/Kernel
6.13.0 - 6.18.8linux
linux/Kernel
6.2.0 - 6.6.122linux
linux/Kernel
6.7.0 - 6.12.68linux
Linux/Linux
< 5.18
Linux/Linux
5.18
Linux/Linux
6.1.162 - 6.1.*
Linux/Linux
6.12.68 - 6.12.*
Linux/Linux
6.18.8 - 6.18.*
Linux/Linux
6.19
... and 8 more
Published
Feb 14, 2026
Tracked Since
Feb 18, 2026