Description
In the Linux kernel, the following vulnerability has been resolved:

pmdomain: imx: Fix i.MX8MP VC8000E power up sequence

Per errata[1]:
ERR050531: VPU_NOC power down handshake may hang during VC8000E/VPUMIX
power up/down cycling.
Description: VC8000E reset de-assertion edge and AXI clock may have a
timing issue.
Workaround: Set bit2 (vc8000e_clk_en) of BLK_CLK_EN_CSR to 0 to gate off
both AXI clock and VC8000E clock sent to VC8000E and AXI clock sent to
VPU_NOC m_v_2 interface during VC8000E power up(VC8000E reset is
de-asserted by HW)

Add a bool variable is_errata_err050531 in
'struct imx8m_blk_ctrl_domain_data' to represent whether the workaround
is needed. If is_errata_err050531 is true, first clear the clk before
powering up gpc, then enable the clk after powering up gpc.

[1] https://www.nxp.com/webapp/Download?colCode=IMX8MP_1P33A
Published: 2026-08-15
Score: n/a
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The fault in the i.MX8MP power domain controller allows the VC8000E/VPUMIX subsystem to hang during power‑up and power‑down cycles. The driver fails to clear the VC8000E clock before initiating a reset the first time, leading to a timing collision that stalls the VPU_NOC handshake. An affected system could become unresponsive or enter a deadlock state, effectively denying service to dependent components such as video processing or firmware update routines.

Affected Systems

This issue arises in the Linux kernel code that implements the imx power domain for i.MX8MP processors. It affects any build that utilizes the VC8000E block controller, typically embedded and industrial boards that rely on the NXP i.MX8MP reference platform. No specific kernel release number is listed in the data, so users should review their kernel source tree for the presence of the errata fix or the work‑around flag.

Risk and Exploitability

No CVSS or EPSS scores are provided, and the vulnerability is not included in the CISA KEV list, which suggests a lower current exploitation probability. The bug requires a local action that triggers a power‑cycle sequence on the VC8000E; it is not remotely exploitable over a network interface. Nevertheless, the resulting hang can interrupt mission‑critical services, and the lack of a documented severity score means administrators may consider it a potential denial‑of‑service risk. The patch mitigates the timing problem by clearing the VC8000E clock before powering up the module and gating the clock during the reset sequence.

Generated by OpenCVE AI on August 15, 2026 at 07:43 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update the Linux kernel or build your kernel with the errata patch that includes the is_errata_err050531 flag and the correct clock sequencing.
  • If a newer kernel is unavailable, apply the NXP‑documented work‑around by clearing bit 2 (vc8000e_clk_en) of BLK_CLK_EN_CSR during VC8000E power‑up and ensuring the clock is re‑enabled only after the GPC has completed powering up.
  • Recompile the kernel and verify that the errata flag is active in the imx8m_blk_ctrl_domain_data structure; then reboot the device to confirm that the VC8000E handshakes complete without hanging.

Generated by OpenCVE AI on August 15, 2026 at 07:43 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sat, 15 Aug 2026 08:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-703
CWE-758

Sat, 15 Aug 2026 06:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx: Fix i.MX8MP VC8000E power up sequence Per errata[1]: ERR050531: VPU_NOC power down handshake may hang during VC8000E/VPUMIX power up/down cycling. Description: VC8000E reset de-assertion edge and AXI clock may have a timing issue. Workaround: Set bit2 (vc8000e_clk_en) of BLK_CLK_EN_CSR to 0 to gate off both AXI clock and VC8000E clock sent to VC8000E and AXI clock sent to VPU_NOC m_v_2 interface during VC8000E power up(VC8000E reset is de-asserted by HW) Add a bool variable is_errata_err050531 in 'struct imx8m_blk_ctrl_domain_data' to represent whether the workaround is needed. If is_errata_err050531 is true, first clear the clk before powering up gpc, then enable the clk after powering up gpc. [1] https://www.nxp.com/webapp/Download?colCode=IMX8MP_1P33A
Title pmdomain: imx: Fix i.MX8MP VC8000E power up sequence
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-15T05:51:37.352Z

Reserved: 2026-08-09T03:40:39.899Z

Link: CVE-2026-72007

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-15T06:20:59.350

Modified: 2026-08-15T06:20:59.350

Link: CVE-2026-72007

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-15T08:45:05Z

Weaknesses
  • CWE-703

    Improper Check or Handling of Exceptional Conditions

  • CWE-758

    Reliance on Undefined, Unspecified, or Implementation-Defined Behavior