Skip to main content

Linux Kernel CVE-2026-31655

| EUVDEUVD-2026-25548 MEDIUM
2026-04-24 Linux GHSA-4h8f-84cr-w3fg
5.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.5 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
vuln.today AI
5.5 MEDIUM

Local-only trigger on specific hardware (AV:L), low-privilege session sufficient (PR:L), no confidentiality or integrity impact, full availability loss via kernel hang (A:H).

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
4.0 AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
SUSE
MEDIUM
qualitative
Red Hat
5.5 LOW
qualitative

Primary rating from NVD.

CVSS VectorNVD

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

6
Analysis Generated
Jul 24, 2026 - 02:45 vuln.today
CVSS changed
Apr 27, 2026 - 20:22 NVD
5.5 (MEDIUM)
Patch released
Apr 27, 2026 - 20:16 nvd
Patch available
Patch available
Apr 24, 2026 - 16:16 EUVD
EUVD ID Assigned
Apr 24, 2026 - 15:00 euvd
EUVD-2026-25548
CVE Published
Apr 24, 2026 - 14:45 nvd
MEDIUM 5.5

DescriptionCVE.org

In the Linux kernel, the following vulnerability has been resolved:

pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled

Keep the NOC_HDCP clock always enabled to fix the potential hang caused by the NoC ADB400 port power down handshake.

AnalysisAI

System hang exposure in the Linux kernel's i.MX 8MP (imx8mp-blk-ctrl) power management domain driver allows a local attacker with low privileges to trigger a kernel hang on affected NXP i.MX 8M Plus-based systems. The root cause is the NOC_HDCP clock being incorrectly allowed to power down, which causes the NoC ADB400 port power-down handshake to deadlock, resulting in a complete loss of system availability. No public exploit code exists and EPSS is 0.02%, indicating this is a stability defect with low opportunistic exploitation probability, though it carries meaningful availability risk on affected embedded hardware.

Technical ContextAI

This vulnerability resides in the pmdomain (power management domain) subsystem of the Linux kernel, specifically the imx8mp-blk-ctrl driver targeting NXP's i.MX 8M Plus (i.MX8MP) SoC. The NoC (Network-on-Chip) fabric interconnect in ARM-based SoCs uses an ADB400 (AMBA Domain Bridge) interface to manage power sequencing between clock and power domains. When the NOC_HDCP clock is disabled before or during the ADB400 port power-down handshake, the handshake cannot complete, causing the kernel to hang indefinitely. The fix pins the NOC_HDCP clock as always-on to prevent this race. CWE data is not assigned, but this fits CWE-667 (Improper Locking) or CWE-662 (Improper Synchronization) - the power-domain driver fails to maintain the correct clock precondition during a state transition. Affected CPE is cpe:2.3:a:linux:linux on kernel branches 6.1 through 7.0, but the practical impact is scoped to hardware using the imx8mp-blk-ctrl driver.

RemediationAI

The primary fix is upgrading to a patched kernel version: 6.6.135 or later (LTS), 6.12.82 or later (LTS), 6.18.23 or later, 6.19.13 or later, or kernel 7.0+. Patch commits are available upstream at the kernel stable repository (e.g., https://git.kernel.org/stable/c/80fd0de89805a3f92dc320f5ab5a18007c260374 for one branch). Ubuntu users should apply the fix via USN-8567-1; Red Hat and SUSE users should track their respective kernel security advisories. As a compensating control, if immediate patching is not possible on i.MX 8M Plus devices, operators can avoid triggering aggressive power management on the NoC HDCP domain by disabling runtime PM for the affected block controller via kernel boot parameters (e.g., adding the device to a PM blacklist via Device Tree overlay) - however this trades power efficiency for stability and requires platform-specific testing. There is no viable network-based mitigation since this is a local hardware power-management defect.

Vendor StatusVendor

SUSE

Severity: Medium
Product Status
SUSE Linux Enterprise Desktop 15 SP7 Fixed
SUSE Linux Enterprise Desktop 15 SP7 Fixed
SUSE Linux Enterprise High Availability Extension 15 SP7 Fixed
SUSE Linux Enterprise High Availability Extension 15 SP7 Fixed
SUSE Linux Enterprise High Performance Computing 15 SP7 Fixed

Share

CVE-2026-31655 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy