In the Linux kernel, the following vulnerability has been resolved:
clk: imx: Fix an out-of-bounds access in dispmix_csr_clk_dev_data
When num_parents is 4, __clk_register() occurs an out-of-bounds when accessing parent_names member. Use ARRAY_SIZE() instead of hardcode number here.
BUG: KASAN: global-out-of-bounds in __clk_register+0x1844/0x20d8 Read of size 8 at addr ffff800086988e78 by task kworker/u24:3/59 Hardware name: NXP i.MX95 19X19 board (DT) Workqueue: events_unbound deferred_probe_work_func Call trace: dump_backtrace+0x94/0xec show_stack+0x18/0x24 dump_stack_lvl+0x8c/0xcc print_report+0x398/0x5fc kasan_report+0xd4/0x114 __asan_report_load8_noabort+0x20/0x2c __clk_register+0x1844/0x20d8 clk_hw_register+0x44/0x110 __clk_hw_register_mux+0x284/0x3a8 imx95_bc_probe+0x4f4/0xa70
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Suse | — | Upgrade kernel-obs-buildUpgrade dtb-hisiliconUpgrade dlm-kmp-defaultUpgrade kernel-macrosUpgrade dtb-amdUpgrade kernel-default-extraUpgrade kernel-default-livepatch-develUpgrade dtb-apmUpgrade kselftests-kmp-defaultUpgrade dtb-mediatekUpgrade dtb-sprdUpgrade dlm-kmp-rtUpgrade dtb-nvidiaUpgrade kernel-kvmsmall-vdsoUpgrade kernel-defaultUpgrade dtb-renesasUpgrade dtb-armUpgrade kernel-64kb-extraUpgrade kernel-rt-extraUpgrade cluster-md-kmp-defaultUpgrade dtb-socionextUpgrade kernel-obs-qaUpgrade cluster-md-kmp-64kbUpgrade dtb-amlogicUpgrade dtb-rockchipUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-rtUpgrade kernel-docsUpgrade dtb-appleUpgrade dtb-marvellUpgrade dtb-caviumUpgrade gfs2-kmp-64kbUpgrade dtb-qcomUpgrade dtb-alteraUpgrade dtb-broadcomUpgrade kernel-default-develUpgrade kernel-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-zfcpdumpUpgrade dtb-lgUpgrade ocfs2-kmp-rtUpgrade kernel-docs-htmlUpgrade kernel-64kb-optionalUpgrade dtb-allwinnerUpgrade dtb-exynosUpgrade cluster-md-kmp-rtUpgrade kernel-default-vdsoUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-rtUpgrade kselftests-kmp-64kbUpgrade kernel-symsUpgrade kernel-rt-vdsoUpgrade kernel-64kb-develUpgrade dtb-freescaleUpgrade kernel-default-optionalUpgrade kernel-rt-optionalUpgrade kernel-sourceUpgrade kernel-kvmsmallUpgrade kernel-default-livepatchUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-defaultUpgrade dtb-xilinxUpgrade kernel-rt-develUpgrade kernel-develUpgrade dtb-amazonUpgrade kernel-rt-livepatchUpgrade kernel-source-vanilla | Dec 5, 2025 | Nov 6, 2025 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.14.0-1016-oemUpgrade linux-image-awsUpgrade linux-image-generic-64k-6.14Upgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-aws-6.14Upgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-gcpUpgrade linux-image-6.14.0-36-genericUpgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-generic-6.14Upgrade linux-image-oem-24.04aUpgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-6.14.0-1017-azureUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-oracleUpgrade linux-image-gcp-64kUpgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-gcp-6.14Upgrade linux-image-oracle-6.14Upgrade linux-image-virtual-6.14Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-realtimeUpgrade linux-image-aws-64k-6.14Upgrade linux-image-oracle-64kUpgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-genericUpgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-realtime-6.14Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-azureUpgrade linux-image-oem-24.04Upgrade linux-image-generic-64kUpgrade linux-image-6.14.0-1017-awsUpgrade linux-image-raspiUpgrade linux-image-aws-64kUpgrade linux-image-oem-6.14Upgrade linux-image-azure-6.14Upgrade linux-image-virtualUpgrade linux-image-raspi-6.14 | Jul 31, 2025 | Jul 25, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub