CVE-2026-23187 in Linux
Summary
by MITRE • 02/14/2026
In the Linux kernel, the following vulnerability has been resolved:
pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains
Fix out-of-range access of bc->domains in imx8m_blk_ctrl_remove().
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Analysis
by VulDB Data Team • 05/05/2026
The vulnerability identified as CVE-2026-23187 resides within the Linux kernel's power management domain subsystem, specifically affecting the imx8m-blk-ctrl driver implementation. This issue manifests as an out-of-range memory access condition that occurs during the removal phase of the driver's operational lifecycle. The affected component is part of the i.MX 8M family of processors, which are widely utilized in embedded systems and automotive applications where reliable power management is critical. The vulnerability is classified under the Common Weakness Enumeration category CWE-129 as an "Improper Validation of Array Index" which directly impacts memory safety and system stability.
The technical flaw occurs within the imx8m_blk_ctrl_remove() function where the driver attempts to access the bc->domains array without proper bounds checking. This function is responsible for cleaning up resources when the driver is unloaded from the kernel, and during this process it accesses memory locations that may exceed the allocated array boundaries. The out-of-range access can lead to memory corruption, potentially allowing malicious actors to execute arbitrary code or cause system crashes. The vulnerability represents a classic buffer overflow scenario where array indices are not validated against array dimensions before access operations occur, creating an attack surface that could be exploited by privilege-escalating malware or malicious actors with kernel-level access capabilities.
The operational impact of this vulnerability extends beyond simple system instability, particularly in embedded environments where the i.MX 8M processors are commonly deployed. When triggered, the out-of-range memory access can result in kernel panics, system crashes, or unpredictable behavior that may compromise the integrity of critical embedded systems. In automotive applications, this could potentially affect vehicle control systems, while in industrial settings it might impact operational technology infrastructure. The vulnerability affects systems running Linux kernels that include the imx8m-blk-ctrl driver, particularly those versions that have not yet received the patch addressing this specific memory access issue. The attack surface is limited to systems where this particular driver is loaded and active, but given the widespread use of i.MX 8M processors, the potential impact is significant across multiple device categories.
Mitigation strategies for CVE-2026-23187 primarily involve applying the official kernel patch that implements proper bounds checking before array access operations in the imx8m_blk_ctrl_remove() function. System administrators should prioritize updating their kernel versions to include the fix, particularly in production environments where these embedded systems are deployed. The patch ensures that all array accesses within the driver are validated against legitimate array boundaries before execution, preventing the out-of-range memory access condition. Additional defensive measures include implementing kernel lockdown mechanisms, enabling kernel address space layout randomization, and applying runtime memory protection features such as stack canaries and memory corruption detection. Organizations should also conduct thorough testing of kernel updates in controlled environments to ensure compatibility with existing embedded applications and system configurations before deployment. The vulnerability aligns with ATT&CK technique T1068 which involves exploiting local privilege escalation opportunities, making proper kernel patch management a critical security control for maintaining system integrity and preventing potential exploitation by advanced persistent threats targeting embedded Linux systems.