CVE-2025-38446 is a high-severity vulnerability in the Linux kernel's clock driver for NXP i.MX processors. It involves an out-of-bounds memory access in the dispmix_csr_clk_dev_data component when the number of parent clocks is four. This flaw arises due to improper handling of the parent_names array size during clock registration, leading to a kernel address sanitizer (KASAN) detected out-of-bounds read. The issue can cause a denial of service via kernel crash but does not impact confidentiality or integrity.