Linux Kernel up to 7.1.9 clk memory corruption

Summaryinfo

A vulnerability was found in Linux Kernel up to 7.1.9. It has been classified as critical. Affected by this vulnerability is an unknown functionality of the component clk. The manipulation leads to memory corruption. This vulnerability is listed as CVE-2026-80523. The attack must be carried out locally. There is no available exploit.

Detailsinfo

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 7.1.9. This issue affects an unknown code block of the component clk. The manipulation with an unknown input leads to a memory corruption vulnerability. Using CWE to declare the problem leads to CWE-119. The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer. Impacted is availability. The summary by CVE is:

In the Linux kernel, the following vulnerability has been resolved: clk: spacemit: k3: set hdma clock as critical HDMA clock is responsible for the internal TCM access path of X100 RISC-V core, so set the clock flag as critical to prevent it from being shut off, otherwise the Linux system will hang, for example in the case of a vector instruction access generates a page fault.

The advisory is shared at git.kernel.org. The identification of this vulnerability is CVE-2026-80523 since 08/26/2026. The exploitation is known to be easy. An attack has to be approached locally. Neither technical details nor an exploit are publicly available. The price for an exploit might be around USD $0-$5k at the moment (estimation calculated on 08/26/2026).

Upgrading to version 7.1.10 eliminates this vulnerability. Applying the patch bb81b608db6342e5adccb6aabe900d739dc7cddb/eb525edd48907795c0d4e498ff57ad168070b289 is able to eliminate this problem.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Type

• Operating System

Vendor

• Linux

Name

• Kernel

Version

• 7.1.0
• 7.1.1
• 7.1.2
• 7.1.3
• 7.1.4
• 7.1.5
• 7.1.6
• 7.1.7
• 7.1.8
• 7.1.9

License

• open-source

Website

• Vendor: https://www.kernel.org/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion