In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx: Fix i.MX8MP VC8000E power up sequence Per errata[1]: ERR050531:… (CVE-2026-72007)
A vulnerability in the Linux kernel related to the i.MX8MP VC8000E power up sequence has been resolved. The issue involves a timing problem with the VC8000E reset de-assertion edge and AXI clock, which can cause a power down handshake to hang during power cycling. The fix involves implementing a workaround that gates off clocks during power up to prevent the hang.
AI Analysis
Technical Summary
This vulnerability (CVE-2026-72007) affects the Linux kernel's handling of the i.MX8MP VC8000E power up sequence. According to errata ERR050531, the VPU_NOC power down handshake may hang during VC8000E/VPUMIX power up/down cycling due to a timing issue with the reset de-assertion edge and AXI clock. The workaround implemented involves gating off the AXI and VC8000E clocks during power up by clearing and then enabling the clock signals in a controlled sequence. This is represented in the kernel by a boolean flag 'is_errata_err050531' to apply the workaround conditionally.
Potential Impact
The vulnerability can cause the power down handshake to hang during power cycling of the VC8000E/VPUMIX components, potentially leading to system instability or failure to properly power cycle these components. No direct exploitation or broader impact details are provided.
Mitigation Recommendations
A fix has been implemented in the Linux kernel that applies a workaround gating off clocks during power up to prevent the handshake hang. Users should update to the patched kernel version that includes this fix. Since this is a kernel-level fix, upgrading the Linux kernel to a version containing this patch is the recommended remediation. Patch status is confirmed by the resolved errata and kernel fix.
In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx: Fix i.MX8MP VC8000E power up sequence Per errata[1]: ERR050531:… (CVE-2026-72007)
Description
A vulnerability in the Linux kernel related to the i.MX8MP VC8000E power up sequence has been resolved. The issue involves a timing problem with the VC8000E reset de-assertion edge and AXI clock, which can cause a power down handshake to hang during power cycling. The fix involves implementing a workaround that gates off clocks during power up to prevent the hang.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability (CVE-2026-72007) affects the Linux kernel's handling of the i.MX8MP VC8000E power up sequence. According to errata ERR050531, the VPU_NOC power down handshake may hang during VC8000E/VPUMIX power up/down cycling due to a timing issue with the reset de-assertion edge and AXI clock. The workaround implemented involves gating off the AXI and VC8000E clocks during power up by clearing and then enabling the clock signals in a controlled sequence. This is represented in the kernel by a boolean flag 'is_errata_err050531' to apply the workaround conditionally.
Potential Impact
The vulnerability can cause the power down handshake to hang during power cycling of the VC8000E/VPUMIX components, potentially leading to system instability or failure to properly power cycle these components. No direct exploitation or broader impact details are provided.
Mitigation Recommendations
A fix has been implemented in the Linux kernel that applies a workaround gating off clocks during power up to prevent the handshake hang. Users should update to the patched kernel version that includes this fix. Since this is a kernel-level fix, upgrading the Linux kernel to a version containing this patch is the recommended remediation. Patch status is confirmed by the resolved errata and kernel fix.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-4c88-c5vh-m8mh
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-72007"]
- Ecosystems
- []
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6a808b79bf8831d5395024b7
Added to database: 08/15/2026, 15:53:29 UTC
Last enriched: 08/15/2026, 17:10:11 UTC
Last updated: 08/15/2026, 18:01:13 UTC
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.