In the Linux kernel, the following vulnerability has been resolved:
clk: imx: Fix an out-of-bounds access in dispmix_csr_clk_dev_data
When num_parents is 4, __clk_register() occurs an out-of-bounds when accessing parent_names member. Use ARRAY_SIZE() instead of hardcode number here.
BUG: KASAN: global-out-of-bounds in __clk_register+0x1844/0x20d8 Read of size 8 at addr ffff800086988e78 by task kworker/u24:3/59 Hardware name: NXP i.MX95 19X19 board (DT) Workqueue: events_unbound deferred_probe_work_func Call trace: dump_backtrace+0x94/0xec show_stack+0x18/0x24 dump_stack_lvl+0x8c/0xcc print_report+0x398/0x5fc kasan_report+0xd4/0x114 __asan_report_load8_noabort+0x20/0x2c __clk_register+0x1844/0x20d8 clk_hw_register+0x44/0x110 __clk_hw_register_mux+0x284/0x3a8 imx95_bc_probe+0x4f4/0xa70
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Suse | — | Upgrade dtb-lgUpgrade ocfs2-kmp-rtUpgrade dtb-broadcomUpgrade dtb-exynosUpgrade dtb-allwinnerUpgrade kernel-rt-livepatchUpgrade kernel-develUpgrade kernel-rt-develUpgrade gfs2-kmp-defaultUpgrade dtb-amazonUpgrade kernel-default-livepatchUpgrade kernel-docs-htmlUpgrade gfs2-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-default-optionalUpgrade kernel-zfcpdumpUpgrade kernel-rt-vdsoUpgrade kernel-symsUpgrade kernel-64kb-develUpgrade kselftests-kmp-64kbUpgrade kernel-rtUpgrade kernel-default-vdsoUpgrade dtb-freescaleUpgrade dtb-xilinxUpgrade dtb-qcomUpgrade gfs2-kmp-64kbUpgrade dtb-alteraUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade dtb-caviumUpgrade kernel-kvmsmallUpgrade kernel-source-vanillaUpgrade kernel-default-develUpgrade kernel-64kbUpgrade kernel-sourceUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-optionalUpgrade dlm-kmp-defaultUpgrade kernel-default-extraUpgrade dtb-amlogicUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-docsUpgrade dtb-appleUpgrade kernel-obs-qaUpgrade kselftests-kmp-rtUpgrade dtb-renesasUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-64kb-extraUpgrade dtb-armUpgrade dtb-mediatekUpgrade dtb-marvellUpgrade dtb-apmUpgrade dtb-sprdUpgrade kernel-default-livepatch-develUpgrade dtb-nvidiaUpgrade dtb-amdUpgrade dlm-kmp-rtUpgrade kselftests-kmp-defaultUpgrade dtb-rockchipUpgrade kernel-defaultUpgrade kernel-kvmsmall-vdsoUpgrade dtb-socionextUpgrade dtb-hisiliconUpgrade kernel-obs-buildUpgrade kernel-macros | Dec 5, 2025 | Nov 6, 2025 |
| Ubuntu | — | Upgrade linux-image-generic-6.14Upgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-realtimeUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-generic-64k-6.14Upgrade linux-image-gcpUpgrade linux-image-awsUpgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-6.14.0-36-genericUpgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-oracle-64kUpgrade linux-image-6.14.0-1017-azureUpgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-virtual-6.14Upgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-aws-6.14Upgrade linux-image-aws-64k-6.14Upgrade linux-image-gcp-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-gcp-6.14Upgrade linux-image-oracle-6.14Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.14.0-1016-oemUpgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-oracleUpgrade linux-image-oem-6.14Upgrade linux-image-raspiUpgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.14.0-1017-awsUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-realtime-6.14Upgrade linux-image-generic-64kUpgrade linux-image-oem-24.04Upgrade linux-image-azureUpgrade linux-image-virtualUpgrade linux-image-raspi-6.14Upgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-genericUpgrade linux-image-aws-64kUpgrade linux-image-azure-6.14 | Jul 31, 2025 | Jul 25, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub