CVE-2026-23187

Severity
7.1HIGH
EPSS
0.0%
top 96.85%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedFeb 14

Description

In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains Fix out-of-range access of bc->domains in imx8m_blk_ctrl_remove().

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:HExploitability: 1.8 | Impact: 5.2

Affected Packages4 packages

NVDlinux/linux_kernel5.166.1.163+4
CVEListV5linux/linux2684ac05a8c4d2d5c49e6c11eb6206b30a2848137842b5dfcac888ece025a2321257d74b2264b099+5
Debianlinux< 6.1.164-1+2
Debianlinux-6.1< 6.1.164-1~deb11u1

Patches

🔴Vulnerability Details

3
OSV
CVE-2026-23187: In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains Fix out-of-range2026-02-14
GHSA
GHSA-48gf-xj76-5v9h: In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains Fix out-of-rang2026-02-14
CVEList
pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains2026-02-14

📋Vendor Advisories

2
Red Hat
kernel: pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains2026-02-14
Debian
CVE-2026-23187: linux - In the Linux kernel, the following vulnerability has been resolved: pmdomain: i...2026

🕵️Threat Intelligence

1
Wiz
CVE-2026-23187 Impact, Exploitability, and Mitigation Steps | Wiz
CVE-2026-23187 (HIGH CVSS 7.1) | In the Linux kernel | cvebase.io