CVE-2026-72007pmdomain: imx: Fix i.MX8MP VC8000E power up sequence
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx: Fix i.MX8MP VC8000E power up sequence Per errata[1]: ERR050531: VPU_NOC power down handshake may hang during VC8000E/VPUMIX power up/down cycling. Description: VC8000E reset de-assertion edge and AXI clock may have a timing issue. Workaround: Set bit2 (vc8000e_clk_en) of BLK_CLK_EN_CSR to 0 to gate off both AXI clock and VC8000E clock sent to VC8000E and AXI clock sent to VPU_NOC m_v_2 interface during VC8000E power up(VC8000E reset is de-asserted by HW) Add a bool variable is_errata_err050531 in 'struct imx8m_blk_ctrl_domain_data' to represent whether the workaround is needed. If is_errata_err050531 is true, first clear the clk before powering up gpc, then enable the clk after powering up gpc. [1] https://www.nxp.com/webapp/Download?colCode=IMX8MP_1P33A
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 17, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from a1a5f15f7f6cb5c291f072af843305638c935be6 before 87af3ebc112fb3f06753794390daf0f665f151b4; from a1a5f15f7f6cb5c291f072af843305638c935be6 before c498928f85651b56a4041ea165a22037eae69580; from a1a5f15f7f6cb5c291f072af843305638c935be6 before 4ff3960f3527189bc115a927ed3561c758f562f1; from a1a5f15f7f6cb5c291f072af843305638c935be6 before 4907f4c2d98b97e640191af5bcf2814ee1034b76; from a1a5f15f7f6cb5c291f072af843305638c935be6 before 25e252bcf1593b420b12a7231d9dd64b885a2ae2 | CNA record |
References
- https://git.kernel.org/stable/c/87af3ebc112fb3f06753794390daf0f665f151b4
- https://git.kernel.org/stable/c/c498928f85651b56a4041ea165a22037eae69580
- https://git.kernel.org/stable/c/4ff3960f3527189bc115a927ed3561c758f562f1
- https://git.kernel.org/stable/c/4907f4c2d98b97e640191af5bcf2814ee1034b76
- https://git.kernel.org/stable/c/25e252bcf1593b420b12a7231d9dd64b885a2ae2
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.