CVE-2026-46293: vulnerability in Linux
clk: microchip: mpfs-ccc: fix out of bounds access during output registration
Published · Updated
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 0.2%
exploitation probability
0.2%top 94% of all CVEs
observed exploitation
nono source reports it
In the Linux kernel, the following vulnerability has been resolved:
clk: microchip: mpfs-ccc: fix out of bounds access during output registration
UBSAN reported an out of bounds access during registration of the last
two outputs. This out of bounds access occurs because space is only
allocated in the hws array for two PLLs and the four output dividers
that each has, but the defined IDs contain two DLLS and their two
outputs each, which are not supported by the driver. The ID order is
PLLs -> DLLs -> PLL outputs -> DLL outputs. Decrement the PLL output IDs
by two while adding them to the array to avoid the problem.
Affected products
Linux · LinuxRelated CVEs — Linux
In the same product, most dangerous first.
CVE-2024-53197HIGHALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devicesEPSS 4.1%KEVCVE-2026-31431HIGHcrypto: algif_aead - Revert to operating out-of-placeEPSS 3.4%KEVCVE-2024-53104HIGHmedia: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_formatEPSS 3.4%KEVCVE-2025-39682CRITICALtls: fix handling of zero-length records on the rx_listEPSS 2.9%KEVCVE-2024-36971HIGHnet: fix __dst_negative_advice() raceEPSS 2.7%KEVCVE-2025-39964HIGHcrypto: af_alg - Disallow concurrent writes in af_alg_sendmsgEPSS 1.4%KEV
References
https://git.kernel.org/stable/c/2f7ae8ab6aa73daaf080d5332110357c29df9c36https://git.kernel.org/stable/c/47bc7a03449c39805bc2665d3e57c73195d5bcf8https://git.kernel.org/stable/c/9ed9b580a814773482c0a4f1be045636e68cc109https://git.kernel.org/stable/c/a0780aeea166a7cf4706c45af4cadbb2a43a1fc9https://git.kernel.org/stable/c/dbfcb09656cb30439577325c9dea2250203c2e3chttps://git.kernel.org/stable/c/f24efd415455b98a1f1cfc6071fe6fde71986706