CVE-2026-46293Disclosure(linux / linux_kernel)

LOWCVSS 7.1 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

In the Linux kernel, the following vulnerability has been resolved: clk: microchip: mpfs-ccc: fix out of bounds access during output registration UBSAN reported an out of bounds access during registration of the last two outputs. This out of bounds access occurs because space is only allocated in the hws array for two PLLs and the four output dividers that each has, but the defined IDs contain two DLLS and their two outputs each, which are not supported by the driver. The ID order is PLLs -> DLLs -> PLL outputs -> DLL outputs. Decrement the PLL output IDs by two while adding them to the array to avoid the problem.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-125

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • linux_kernel

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • 1 total mentions across 1 day

Affected systems

Vendors
Products
linux_kernel

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-06-10: 1Technical Details · 2026-06-10: 106-10
Signal classification1 categories
Disclosure
1100.0%
Referenced assets1 URL
Full discourse1 post
  • WindowsForum@windowsforum
    Disclosure

    🪟 CVE-2026-46293 is why “kernel panic” isn’t a vibe—it’s a spectrum. Out-of-bounds in a clock driver might be niche, but it screams: regressions everywhere, patch responsibly. #WindowsForum #Microsoft #Linux #CVE https://windowsforum.com/threads/cve-2026-46293-microchip-polarfire-linux-clock-driver-oob-fix-explained.424978/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #LinuxKernel #Cve #EmbeddedSecurity https://t.co/qGXA3Gm0o6

    Post summary

    The post highlights CVE‑2026‑46293 as an out‑of‑bounds flaw in a Linux clock driver but provides no PoC, exploit, or patch details, focusing mainly on announcing the vulnerability.

    0000047
    1.2K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
OSlinuxlinux_kernel---

Explore more