PT-2026-8109 · Linux+2 · Linux Kernel+2

Published 2026-01-01 · Updated 2026-05-22 · CVE-2026-23116

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw in the imx8m-blk-ctrl driver related to the handling of reset and clock control for the VPUMIX domain on i.MX8MQ platforms. Specifically, the ADB in the VPUMIX domain lacks separate reset and clock enable bits, and is ungated, being reset along with the VPUs. Attempting to reset G1 or G2 independently can lead to system hangs. The issue is addressed by removing the separate reset and clock masks, allowing the imx8mq vpu power notifier() function to handle the VPUs’ reset.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2026-23116

OPENSUSE-SU-2026:20416-1

SUSE-SU-2026:0962-1

SUSE-SU-2026:1081-1

SUSE-SU-2026:20667-1

SUSE-SU-2026:20720-1

SUSE-SU-2026:20838-1

SUSE-SU-2026:20845-1

SUSE-SU-2026:20876-1

SUSE-SU-2026:20931-1

SUSE-SU-2026:21284-1

USN-8278-1

USN-8289-1

USN-8296-1

Affected Products

Linux Kernel

Ubuntu

I.Mx8Mq

References · 1773

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23116.json · Exploit
• https://ubuntu.com/security/CVE-2026-23083 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23148 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23123 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40149 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23032 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20667-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71184 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23038 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23101 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23136 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23113 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23025 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23035 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-22977 · Vendor Advisory