CVE-2026-23187

HighCVSS 7.1/10Last modified Nov 5, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains

Fix out-of-range access of bc->domains in imx8m_blk_ctrl_remove().

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Weakness enumeration

CWE-125

Affected software

VendorProductVersions
LinuxLinux>= 2684ac05a8c4d2d5c49e6c11eb6206b30a284813, < 7842b5dfcac888ece025a2321257d74b2264b099; >= 2684ac05a8c4d2d5c49e6c11eb6206b30a284813, < 071159ff5c0bf2e5efff79501e23faf3775cbcd1; >= 2684ac05a8c4d2d5c49e6c11eb6206b30a284813, < 4390dcdabb5fca4647bf56a5a6b050bbdfa5760f; >= 2684ac05a8c4d2d5c49e6c11eb6206b30a284813, < eb54ce033b344b531b374496e68a2554b2b56b5a; >= 2684ac05a8c4d2d5c49e6c11eb6206b30a284813, < 6bd8b4a92a901fae1a422e6f914801063c345e8d
LinuxLinux5.16

References

Timeline

Published
Feb 14, 2026
Last modified
Nov 5, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-231885.5In the Linux kernel, the following vulnerability has been resolved: net: usb: r8152: fix resume reset deadlock rtl8152 can trigger device CVE-2026-231895.5In the Linux kernel, the following vulnerability has been resolved: ceph: fix NULL pointer dereference in ceph_mds_auth_match() The CephFSCVE-2026-23197.5Race in DevTools in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage in specific UI gestures anCVE-2026-231905.5In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: fix memory leak in acp3x pdm dma opsCVE-2026-231917.0In the Linux kernel, the following vulnerability has been resolved: ALSA: aloop: Fix racy access at PCM trigger The PCM trigger callback oCVE-2026-231927.8In the Linux kernel, the following vulnerability has been resolved: linkwatch: use __dev_put() in callers to prevent UAF After linkwatch_dCVE-2026-231937.8In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_couCVE-2026-231947.8In the Linux kernel, the following vulnerability has been resolved: rust_binder: correctly handle FDA objects of length zero Fix a bug wheCVE-2026-231957.8In the Linux kernel, the following vulnerability has been resolved: cgroup/dmem: avoid pool UAF An UAF issue was observed: BUG: KASAN: slCVE-2026-231965.5In the Linux kernel, the following vulnerability has been resolved: HID: Intel-thc-hid: Intel-thc: Add safety check for reading DMA buffer CVE-2026-231975.5In the Linux kernel, the following vulnerability has been resolved: i2c: imx: preserve error state in block data length handler When a bloCVE-2026-231985.5In the Linux kernel, the following vulnerability has been resolved: KVM: Don't clobber irqfd routing type when deassigning irqfd When deas
CVE-2026-23187: High severity, CVSS 7.1 | Vulnix