CVE-2026-72009
kernel: pmdomain: imx93-blk-ctrl: Extract PHY as shared domain for DSI/CSI
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · August 15, 2026
Updated · October 30, 2026
Description
A flaw was found in the Linux kernel. The MIPI DSI (Display Serial Interface) and CSI (Camera Serial Interface) power domains share control bits for clock and reset. This improper resource management allows one domain to disable shared resources while the other is still active, leading to incorrect system behavior. This can result in a denial of service (DoS) or system instability.
Statement
This flaw is rated as Low impact for Red Hat because it requires local access on specialized NXP i.MX93 hardware and is limited to causing a denial of service rather than privilege escalation. Typical enterprise server and cloud installations do not utilize this embedded system-on-chip power management driver, substantially limiting exposure. Systems are only affected if deployed on targeted ARM platforms actively operating concurrent display and camera interfaces.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-413 · Improper Resource Locking