Executive brief
A logic error in the Linux kernel's clock driver for SpacemiT K1 processors can cause the system to crash (kernel panic). This occurs when the system attempts to adjust the processor's frequency to save power or increase performance. An exploit of this vulnerability primarily impacts system availability, potentially leading to unexpected downtime or service interruptions.
Technical details
A vulnerability in the SpacemiT CCU (Clock Control Unit) driver within the Linux kernel stems from an inverted conditional check in the ccu_mix_trigger_fc() function. Specifically, the code incorrectly skipped the frequency change trigger when it should have executed it, leading to kernel panics during cpufreq scaling operations. This issue affects systems using the SpacemiT K1 SoC. The fix corrects the logic to ensure the frequency change trigger is properly invoked. Patches have been backported to various stable kernel branches including 6.18.y and 7.0.y.
Affected products
- Linux Linux 6.16, 6.18.33, 7.0.10, 7.1
Timeline
- 2026-03-05: other: Vulnerability fixed in source code by Shuwei Wu
- 2026-06-24: disclosed: CVE published to NVD dataset