Clock Handling Vulnerability in TH1520 by Linux Kernel

CVE-2025-68318

What is CVE-2025-68318?

A vulnerability in the Linux kernel related to the AXI crossbar of the TH1520 SoC allows improper timeout handling. This issue can lead to bus timeouts when AXI clocks are gated, potentially causing system hangs. To mitigate this, it is recommended to set all AXI clocks to CLK_IS_CRITICAL, preventing unwanted clock gating during system resets and ensuring better reliability of the system in operation.

References