CVE-2026-46293: clk: microchip: mpfs-ccc: fix out of bounds access during output registration
clk: microchip: mpfs-ccc: fix out of bounds access during output registration
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.141.1-1 - Configuration
Update the Linux kernel clk: microchip: mpfs-ccc code to decrement PLL output IDs during PLLs -> DLLs -> PLL outputs -> DLL outputs registration, so the ID order matches the supported outputs and prevents out-of-bounds access reported by UBSAN.
Linux kernel clk: microchip: mpfs-ccc PLL output ID order/registration indexing = Decrement PLL output IDs
Event History
Frequently Asked Questions
What is the severity of CVE-2026-46293?
CVE-2026-46293 has a risk score of 12, indicating a critical vulnerability.
How do I fix CVE-2026-46293?
To fix CVE-2026-46293, update your Linux kernel to the latest version where the vulnerability has been patched.
What systems are affected by CVE-2026-46293?
CVE-2026-46293 affects the Linux kernel specifically in the context of the Microchip MPFS clock controller.
What kind of vulnerability is CVE-2026-46293?
CVE-2026-46293 is an out-of-bounds access vulnerability that can lead to undefined behavior in the Linux kernel.
How can CVE-2026-46293 impact system security?
CVE-2026-46293 can potentially allow an attacker to exploit the out-of-bounds access, leading to system instability or arbitrary code execution.