Skip to main content

Linux Kernel EUVDEUVD-2026-38887

| CVE-2026-53019 MEDIUM
2026-06-24 Linux GHSA-399v-vw49-mfxj
5.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.5 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
vuln.today AI
5.5 MEDIUM

Local vector confirmed by driver-level access; PR:L because any local user can trigger cpufreq scaling; A:H for kernel panic; no confidentiality or integrity impact described.

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
4.0 AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
SUSE
MEDIUM
qualitative

Primary rating from NVD.

CVSS VectorNVD

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

5
Analysis Generated
Jul 15, 2026 - 14:08 vuln.today
CVSS changed
Jul 15, 2026 - 14:07 NVD
5.5 (MEDIUM)
Patch available
Jun 24, 2026 - 18:02 EUVD
CVE Published
Jun 24, 2026 - 16:29 nvd
MEDIUM 5.5
CVE Published
Jun 24, 2026 - 16:29 cve.org
UNKNOWN (no severity yet)

DescriptionNVD

In the Linux kernel, the following vulnerability has been resolved:

clk: spacemit: ccu_mix: fix inverted condition in ccu_mix_trigger_fc()

Fix inverted condition that skips frequency change trigger, causing kernel panics during cpufreq scaling.

AnalysisAI

Kernel panic in the SpaceMIT clock controller driver (clk-spacemit-ccu) can be triggered during CPU frequency scaling on systems running SpaceMIT RISC-V hardware. The root cause is an inverted boolean condition in ccu_mix_trigger_fc() that causes the frequency change trigger to be skipped at the wrong time and fired at the wrong time, crashing the kernel under normal cpufreq governor activity. Exploitation requires only local low-privilege access, but is practically limited to the narrow hardware footprint of SpaceMIT K1-based boards; no public exploit or CISA KEV listing exists, and EPSS is 0.17% (6th percentile).

Technical ContextAI

The affected code resides in the Linux kernel's clock subsystem (drivers/clk/spacemit/ccu_mix.c), which manages clock frequency changes for SpaceMIT's K1 RISC-V SoC. The ccu_mix_trigger_fc() function is responsible for issuing a frequency change (FC) trigger to the hardware clock control unit (CCU). Due to an inverted condition (!condition instead of condition), the trigger fires when it should be suppressed and is suppressed when it should fire, corrupting hardware clock state and causing kernel panics whenever the cpufreq subsystem (e.g., a frequency governor like schedutil or ondemand) attempts to scale the CPU clock. The CWE is not formally assigned in the input data, but the root cause class is CWE-570 (Expression is Always False) or CWE-571 (Expression is Always True). CPE data (cpe:2.3:a:linux:linux) confirms this as an upstream Linux kernel issue.

RemediationAI

Update to a patched Linux kernel version: 6.18.33, 7.0.10, or 7.1 (or later). Three upstream stable-tree commits carry the fix: da99d0302d3ccccfb13c69e663bf8eae698b9562, 54e97360b44bed6b4399dd3be3d65f392df940fa, and 16dfbc4e95c46dd9c79cb8d550c7f267d4a79b91, all available at https://git.kernel.org/stable/. Distribution maintainers for SpaceMIT K1 platforms (e.g., Bianbu Linux) should be checked for backported packages. As a compensating control, disabling dynamic CPU frequency scaling (setting the cpufreq governor to performance to eliminate frequency transitions, or passing cpufreq.off=1 on the kernel command line) will prevent the panic from occurring, at the cost of increased power consumption and loss of thermal/power management. This workaround is reversible and has no security side effects, but is not a substitute for patching.

Vendor StatusVendor

SUSE

Severity: Moderate
Product Status
SUSE Linux Enterprise Desktop 15 SP7 Not-Affected
SUSE Linux Enterprise Desktop 15 SP7 Not-Affected
SUSE Linux Enterprise High Availability Extension 15 SP7 Not-Affected
SUSE Linux Enterprise High Availability Extension 15 SP7 Not-Affected
SUSE Linux Enterprise High Performance Computing 15 SP7 Not-Affected

Share

EUVD-2026-38887 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy