PT-2026-47365 · Linux+2 · Linux Kernel+2

CVE-2026-46293

·

Published

2026-06-08

·

Updated

2026-09-07

CVSS v3.1

7.1

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description An out-of-bounds access occurs in the mpfs-ccc clock driver during the registration of the last two outputs. This happens because the hws array is allocated space for two PLLs and their four respective output dividers, but the defined IDs include two DLLs and their two outputs each, which the driver does not support. The ID sequence follows the order of PLLs, then DLLs, then PLL outputs, and finally DLL outputs.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Out of bounds Read

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-46293
ECHO-A202-DFDC-E43E
OPENSUSE-SU-2026:11014-1
USN-8566-1
USN-8567-1
USN-8568-1
USN-8569-1
USN-8574-1
USN-8574-2
USN-8574-3
USN-8593-1
USN-8595-1
USN-8595-2
USN-8595-3
USN-8596-1
USN-8603-1
USN-8606-1
USN-8607-1
USN-8608-1
USN-8609-1
USN-8618-1
USN-8619-1
USN-8663-1
USN-8664-1
USN-8665-1
USN-8728-1

Affected Products

Linuxmint
Linux Kernel
Ubuntu