Vulnerability in Linux
CVE-2026-23116
In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx8m-blk-ctrl: Remove separate rst and clk mask for 8mq vpu For i.MX8MQ platform, the ADB in the VPUMIX domain has no separate reset and clock enable bits, but is ungated and reset together with the VPUs. So we can't reset G1 or G2 separately, it may led to the system hang. Remove rst_mask and clk_mask of imx8mq_vpu_blk_ctl_domain_data. Let imx8mq_vpu_power_notifier() do really vpu reset.
EPSS: 0.001 (1.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Linux — versions 608d7c325e855cb4a853afef3cd9f0df594bd12d, 5.18, 0
- Linux Linux_kernel — versions 6.19
References
Frequently asked questions
- What is CVE-2026-23116?
- CVE-2026-23116 is a medium-severity vulnerability in Linux. CVSS score: 5.5/10. Published 2026-02-14.
- How severe is CVE-2026-23116?
- Medium severity. CVSS v3 base score is 5.5 out of 10.