CVE-2026-87765 - Vulnerability Details - OpenCVE

In the kernel apsys DVFS driver, there is a possible out-of-bounds read or hardware register corruption due to improper input validation of the frequency index. This could lead to system instability or denial of service with local privileges.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Unisoc	Kernel

No data.

No data.

References

Link	Providers
https://www.unisoc.com/en/support/product-security-bulletin/2109454821805424641

History

Fri, 16 Oct 2026 17:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Tue, 13 Oct 2026 08:15:00 +0000

Type	Values Removed	Values Added
First Time appeared		Unisoc Unisoc kernel
Vendors & Products		Unisoc Unisoc kernel

Mon, 12 Oct 2026 02:15:00 +0000

Type	Values Removed	Values Added
Description		In the kernel apsys DVFS driver, there is a possible out-of-bounds read or hardware register corruption due to improper input validation of the frequency index. This could lead to system instability or denial of service with local privileges.
Title		Improper Input Validation in Kernel APsys DVFS
Weaknesses		CWE-20
References		https://www.unisoc.com/en/support/product-security-bulletin/2109454821805424641
Metrics		cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}`

MITRE

Status: PUBLISHED

Assigner: Unisoc

Published: 2026-10-12T01:28:25.514Z

Updated: 2026-10-16T15:56:38.839Z

Reserved: 2026-09-09T07:37:43.484Z

Link: CVE-2026-87765

Vulnrichment

Updated: 2026-10-16T15:56:15.535Z

NVD

Status : Awaiting Analysis

Published: 2026-10-12T02:16:57.727

Modified: 2026-10-16T19:55:59.740

Link: CVE-2026-87765

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-87765", "assignerOrgId": "63f92e9c-2193-4c24-98a9-93640392c3d3", "state": "PUBLISHED", "assignerShortName": "Unisoc", "dateReserved": "2026-09-09T07:37:43.484Z", "datePublished": "2026-10-12T01:28:25.514Z", "dateUpdated": "2026-10-16T15:56:38.839Z"}, "containers": {"cna": {"affected": [{"vendor": "Unisoc (Shanghai) Technologies Co., Ltd.", "product": "kernel", "versions": [{"version": "T610", "status": "affected"}, {"version": "T618", "status": "affected"}, {"version": "T7200", "status": "affected"}, {"version": "T7225", "status": "affected"}, {"version": "T7250", "status": "affected"}, {"version": "T7255", "status": "affected"}, {"version": "T7280", "status": "affected"}, {"version": "T8100", "status": "affected"}, {"version": "T9100", "status": "affected"}, {"version": "T8200", "status": "affected"}, {"version": "T7300", "status": "affected"}, {"version": "T8300", "status": "affected"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "In the kernel apsys DVFS driver, there is a possible out-of-bounds read or hardware register corruption due to improper input validation of the frequency index. This could lead to system instability or denial of service with local privileges."}], "references": [{"url": "https://www.unisoc.com/en/support/product-security-bulletin/2109454821805424641"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM"}}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-20", "cweId": "CWE-20", "type": "CWE"}]}], "title": "Improper Input Validation in Kernel APsys DVFS", "providerMetadata": {"orgId": "63f92e9c-2193-4c24-98a9-93640392c3d3", "shortName": "Unisoc", "dateUpdated": "2026-10-12T01:28:25.514Z"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-10-16T15:55:08.097212Z", "id": "CVE-2026-87765", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-16T15:56:38.839Z"}}]}}

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-87765", "assignerOrgId": "63f92e9c-2193-4c24-98a9-93640392c3d3", "state": "PUBLISHED", "assignerShortName": "Unisoc", "dateReserved": "2026-09-09T07:37:43.484Z", "datePublished": "2026-10-12T01:28:25.514Z", "dateUpdated": "2026-10-16T15:56:38.839Z"}, "containers": {"cna": {"affected": [{"vendor": "Unisoc (Shanghai) Technologies Co., Ltd.", "product": "kernel", "versions": [{"version": "T610", "status": "affected"}, {"version": "T618", "status": "affected"}, {"version": "T7200", "status": "affected"}, {"version": "T7225", "status": "affected"}, {"version": "T7250", "status": "affected"}, {"version": "T7255", "status": "affected"}, {"version": "T7280", "status": "affected"}, {"version": "T8100", "status": "affected"}, {"version": "T9100", "status": "affected"}, {"version": "T8200", "status": "affected"}, {"version": "T7300", "status": "affected"}, {"version": "T8300", "status": "affected"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "In the kernel apsys DVFS driver, there is a possible out-of-bounds read or hardware register corruption due to improper input validation of the frequency index. This could lead to system instability or denial of service with local privileges."}], "references": [{"url": "https://www.unisoc.com/en/support/product-security-bulletin/2109454821805424641"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM"}}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-20", "cweId": "CWE-20", "type": "CWE"}]}], "title": "Improper Input Validation in Kernel APsys DVFS", "providerMetadata": {"orgId": "63f92e9c-2193-4c24-98a9-93640392c3d3", "shortName": "Unisoc", "dateUpdated": "2026-10-12T01:28:25.514Z"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-87765", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-10-16T15:55:08.097212Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-16T15:56:15.535Z"}}]}}