CVE-2026-72007

Received Received - Intake

Power Sequence Issue in i.MX8MP VC8000E Linux Kernel

Publication date: 2026-08-15

Last updated on: 2026-08-17

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx: Fix i.MX8MP VC8000E power up sequence Per errata[1]: ERR050531: VPU_NOC power down handshake may hang during VC8000E/VPUMIX power up/down cycling. Description: VC8000E reset de-assertion edge and AXI clock may have a timing issue. Workaround: Set bit2 (vc8000e_clk_en) of BLK_CLK_EN_CSR to 0 to gate off both AXI clock and VC8000E clock sent to VC8000E and AXI clock sent to VPU_NOC m_v_2 interface during VC8000E power up(VC8000E reset is de-asserted by HW) Add a bool variable is_errata_err050531 in 'struct imx8m_blk_ctrl_domain_data' to represent whether the workaround is needed. If is_errata_err050531 is true, first clear the clk before powering up gpc, then enable the clk after powering up gpc. [1] https://www.nxp.com/webapp/Download?colCode=IMX8MP_1P33A

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-15

Last Modified

2026-08-17

Generated

2026-09-04

AI Q&A

2026-08-15

EPSS Evaluated

2026-09-03

NVD

CVE-2026-72007

EUVD

EUVD-2026-59106

Affected Vendors & Products

Vendor	Product	Version / Range
nxp	imx8mp	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is in the Linux kernel affecting the i.MX8MP SoC. It involves a power-up sequence issue with the VC8000E video processing unit where the VPU_NOC power down handshake may hang during power cycling. A timing problem exists between VC8000E reset de-assertion and AXI clock signals.

Detection Guidance

This vulnerability is specific to the i.MX8MP VC8000E power domain in the Linux kernel. Detection requires checking kernel logs for power domain or VC8000E-related errors during system boot or power state changes. No direct network detection commands are applicable.

Impact Analysis

The vulnerability could cause system hangs or crashes during video processing tasks on devices using i.MX8MP SoC. It may lead to unexpected reboots or unresponsive systems when powering up or down the VC8000E unit repeatedly.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards. It is a hardware-level power management issue in the Linux kernel affecting i.MX8MP VC8000E power sequencing, which may cause system instability but does not involve data privacy or security controls.

Mitigation Strategies

Apply the kernel patch that adds the is_errata_err050531 workaround flag and adjusts the power-up sequence. Alternatively, manually set bit2 of BLK_CLK_EN_CSR to 0 to gate off clocks during VC8000E power up as a temporary fix.

Hi! I’m here to help you understand CVE-2026-72007. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70