CVE-2026-68280

A flaw was found in the Linux kernel's drm/bridge: cdns-dsi component. This vulnerability arises from the incorrect use of a deprecated power management function, causing the system to attempt to disable DSI (Display Serial Interface) clocks twice during suspend operations. This redundant action triggers warning messages within the clock framework, which can lead to system instability or unexpected operational behavior.

This vulnerability is rated as Moderate impact because exploitation requires initiating system suspend operations on platforms configured with specialized Cadence DSI display hardware, with consequences limited to kernel warnings or localized system instability rather than code execution or privilege escalation. The Cadence DSI bridge driver is not enabled on standard Red Hat Enterprise Linux enterprise kernels, significantly restricting exposure in typical server and cloud environments. Systems running without this specific display hardware bridge are unaffected.