CVE-2026-87765
5.5MediumPublished 12 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
- Impact
- High impact on availability
- Weakness
- CWE-20
Impact
A local attacker with user privileges can trigger system instability or crash the kernel, causing a denial of service. They need local code execution on the target device first.
Root cause
The kernel apsys DVFS driver fails to validate the frequency index input, resulting in an out-of-bounds read or hardware register corruption.
Affected systems
Unisoc apsys DVFS driver; exact chipsets and kernel versions not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Fix & remediation
Apply the driver patch or updated firmware from Unisoc; no interim configuration workaround is provided.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
In the kernel apsys DVFS driver, there is a possible out-of-bounds read or hardware register corruption due to improper input validation of the frequency index. This could lead to system instability or denial of service with local privileges.