{"cve":"CVE-2026-72007","nvd":{"published":"2026-08-15T06:20:59.350","modified":"2026-10-30T13:19:46.480","status":"Received","description":"In the Linux kernel, the following vulnerability has been resolved:\n\npmdomain: imx: Fix i.MX8MP VC8000E power up sequence\n\nPer errata[1]:\nERR050531: VPU_NOC power down handshake may hang during VC8000E/VPUMIX\npower up/down cycling.\nDescription: VC8000E reset de-assertion edge and AXI clock may have a\ntiming issue.\nWorkaround: Set bit2 (vc8000e_clk_en) of BLK_CLK_EN_CSR to 0 to gate off\nboth AXI clock and VC8000E clock sent to VC8000E and AXI clock sent to\nVPU_NOC m_v_2 interface during VC8000E power up(VC8000E reset is\nde-asserted by HW)\n\nAdd a bool variable is_errata_err050531 in\n'struct imx8m_blk_ctrl_domain_data' to represent whether the workaround\nis needed. If is_errata_err050531 is true, first clear the clk before\npowering up gpc, then enable the clk after powering up gpc.\n\n[1] https://www.nxp.com/webapp/Download?colCode=IMX8MP_1P33A","cvss_v4":null,"cvss_v3":null,"cwes":[],"references":["https://git.kernel.org/stable/c/25e252bcf1593b420b12a7231d9dd64b885a2ae2","https://git.kernel.org/stable/c/4907f4c2d98b97e640191af5bcf2814ee1034b76","https://git.kernel.org/stable/c/4ff3960f3527189bc115a927ed3561c758f562f1","https://git.kernel.org/stable/c/87af3ebc112fb3f06753794390daf0f665f151b4","https://git.kernel.org/stable/c/9601551ceb039ab1c01cfa3aee153928a6d4f3c5"],"products":[],"source":"nvd","synced_at":"2026-10-30T13:47:47.119061695+00:00"},"epss":{"cve":"CVE-2026-72007","score":0.00209,"percentile":0.11099,"date":"2026-10-30"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}