Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability exists in the Linux kernel's handling of the VPU clock and reset management for the i.MX8MQ platform. The ADB in the VPUMIX domain is reset together with the VPUs, lacking separate control for G1 and G2, which can lead to system hangs. This issue arises because the ADB has no distinct reset or clock enable bits, causing dependency on the VPU's overall state. The vulnerability has been addressed by removing the separate reset and clock masks for the VPU blocks and allowing the power notifier to manage the resets properly.
The previous management of VPU resets could cause system hangs, disrupting normal operations.
The issue can be reproduced on an i.MX8MQ platform by attempting to reset the VPU blocks G1 or G2 separately, which will lead to a system hang. This behavior is due to the ADB in the VPUMIX domain being reset together with the VPUs, without separate control for the individual blocks.
The vulnerability has been fixed in the Linux kernel stable tree. Instructions for applying the update can be found in the Linux kernel documentation.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.