CVE-2026-68280drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS() The deprecated UNIVERSAL_DEV_PM_OPS() macro uses the provided callbacks for both runtime PM and system sleep. This causes the DSI clocks to be disabled twice: once during runtime suspend and again during system suspend, resulting in a WARN message from the clock framework when attempting to disable already-disabled clocks. [ 84.384540] clk:231:5 already disabled [ 84.388314] WARNING: CPU: 2 PID: 531 at /drivers/clk/clk.c:1181 clk_core_disable+0xa4/0xac ... [ 84.579183] Call trace: [ 84.581624] clk_core_disable+0xa4/0xac [ 84.585457] clk_disable+0x30/0x4c [ 84.588857] cdns_dsi_suspend+0x20/0x58 [cdns_dsi] [ 84.593651] pm_generic_suspend+0x2c/0x44 [ 84.597661] ti_sci_pd_suspend+0xbc/0x15c [ 84.601670] dpm_run_callback+0x8c/0x14c [ 84.605588] __device_suspend+0x1a0/0x56c [ 84.609594] dpm_suspend+0x17c/0x21c [ 84.613165] dpm_suspend_start+0xa0/0xa8 [ 84.617083] suspend_devices_and_enter+0x12c/0x634 [ 84.621872] pm_suspend+0x1fc/0x368 To address this issue, replace UNIVERSAL_DEV_PM_OPS() with RUNTIME_PM_OPS(). Bridge and panel drivers should only deal with runtime PM, as the DRM framework manages system-wide power transitions through the bridge enable() and disable() hooks.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 23, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from e19233955d9e9a9ae202723b9a38ef38e755b5c0 before 1014b279264c0fc9f56324608754e36d33b7b5ae; from e19233955d9e9a9ae202723b9a38ef38e755b5c0 before c18d46d9830c29677be5213a067daafe1ac80e43; from e19233955d9e9a9ae202723b9a38ef38e755b5c0 before 347bc3a6a4d968c403d2292e5ad986294d919dfc; from e19233955d9e9a9ae202723b9a38ef38e755b5c0 before c0384d6872f4dc2701960048a0be1a12a8d2dc6e; from e19233955d9e9a9ae202723b9a38ef38e755b5c0 before 1f9c6b74e79639179e90ad0c0fbeae26e31e044b; from e19233955d9e9a9ae202723b9a38ef38e755b5c0 before 2d8b08844c0ecc6f2002fa68711e779aa18c8585 | CNA record |
References
- https://git.kernel.org/stable/c/1014b279264c0fc9f56324608754e36d33b7b5ae
- https://git.kernel.org/stable/c/c18d46d9830c29677be5213a067daafe1ac80e43
- https://git.kernel.org/stable/c/347bc3a6a4d968c403d2292e5ad986294d919dfc
- https://git.kernel.org/stable/c/c0384d6872f4dc2701960048a0be1a12a8d2dc6e
- https://git.kernel.org/stable/c/1f9c6b74e79639179e90ad0c0fbeae26e31e044b
- https://git.kernel.org/stable/c/2d8b08844c0ecc6f2002fa68711e779aa18c8585
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.