CVE-2026-46293

clk: microchip: mpfs-ccc: fix out of bounds access during output registration

published June 8, 2026

CVSS
—
EPSS
0%
Percentile
5.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

clk: microchip: mpfs-ccc: fix out of bounds access during output registration

UBSAN reported an out of bounds access during registration of the last

two outputs. This out of bounds access occurs because space is only

allocated in the hws array for two PLLs and the four output dividers

that each has, but the defined IDs contain two DLLS and their two

outputs each, which are not supported by the driver. The ID order is

PLLs -> DLLs -> PLL outputs -> DLL outputs. Decrement the PLL output IDs

by two while adding them to the array to avoid the problem.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00167 · 5.6th percentile
Published
2026-06-08T15:46Z
EPSS history
Timeline
  • 08 JUN 15:46Z
    clk: microchip: mpfs-ccc: fix out of bounds access during output registration
    cvelistv5