Description
In the Linux kernel, the following vulnerability has been resolved:

clk: spacemit: k3: set hdma clock as critical

HDMA clock is responsible for the internal TCM access path of X100 RISC-V
core, so set the clock flag as critical to prevent it from being shut off,
otherwise the Linux system will hang, for example in the case of a vector
instruction access generates a page fault.
Published: 2026-08-26
Score: 7.1 High
EPSS: < 1% Very Low
KEV: No
Impact: Denial of Service via system hang
Action: Patch Update
AI Analysis

Impact

The Linux kernel contains a flaw on Spacemit K3 platforms where the HDMA clock, which controls the internal TCM access path of the X100 RISC‑V core, is not marked as critical by default. When the clock is turned off, a page fault can be triggered during a vector instruction access, causing the kernel to hang and the entire system to stop. This leads to a denial‑of‑service condition with no data loss but a complete loss of availability.

Affected Systems

Linux kernel builds compiled for the Spacemit K3 hardware configuration are affected. Any kernel that does not include the recent commit which marks the HDMA clock as critical can potentially suffer this issue. No specific kernel release numbers are enumerated, so the problem may exist across multiple kernel versions targeting this platform.

Risk and Exploitability

The CVSS score is 7.1, reflecting a medium to high severity that indicates a significant denial‑of‑service impact if exploited. The EPSS score is < 1%, indicating a very low probability of exploitation. The vulnerability is not listed in CISA KEV, which means no known public exploits. Exploitation would require local or low‑level kernel access to disable the HDMA clock; remote exploitation without prior compromise is unlikely. Thus the risk is limited to environments with physical access or where privilege escalation to kernel level is possible.

Generated by OpenCVE AI on August 28, 2026 at 16:08 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply a kernel update that includes the patch making the HDMA clock critical
  • If an update is not possible, modify the kernel configuration or device tree to set the HDMA clock flag as critical
  • Implement monitoring for sudden system hangs and configure automated reboots or alerting if a potential vector‑instruction page fault occurs

Generated by OpenCVE AI on August 28, 2026 at 16:08 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 27 Aug 2026 18:00:00 +0000


Thu, 27 Aug 2026 06:15:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 7.1, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H'}


Wed, 26 Aug 2026 18:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-703

Wed, 26 Aug 2026 14:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: clk: spacemit: k3: set hdma clock as critical HDMA clock is responsible for the internal TCM access path of X100 RISC-V core, so set the clock flag as critical to prevent it from being shut off, otherwise the Linux system will hang, for example in the case of a vector instruction access generates a page fault.
Title clk: spacemit: k3: set hdma clock as critical
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-27T05:01:19.881Z

Reserved: 2026-08-26T14:34:25.763Z

Link: CVE-2026-80523

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-26T15:17:05.940

Modified: 2026-08-27T06:17:31.467

Link: CVE-2026-80523

cve-icon Redhat

Severity : Low

Publid Date: 2026-08-26T00:00:00Z

Links: CVE-2026-80523 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-08-28T16:30:17Z

Weaknesses
  • CWE-703

    Improper Check or Handling of Exceptional Conditions

  • CWE-909

    Missing Initialization of Resource