CVE Database›Document archive›CVE-2026-72009

CVE-2026-72009

kernel: pmdomain: imx93-blk-ctrl: Extract PHY as shared domain for DSI/CSI

Loading…

Severity

Low

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · August 15, 2026

Updated · October 30, 2026

Description

A flaw was found in the Linux kernel. The MIPI DSI (Display Serial Interface) and CSI (Camera Serial Interface) power domains share control bits for clock and reset. This improper resource management allows one domain to disable shared resources while the other is still active, leading to incorrect system behavior. This can result in a denial of service (DoS) or system instability.

Statement

This flaw is rated as Low impact for Red Hat because it requires local access on specialized NXP i.MX93 hardware and is limited to causing a denial of service rather than privilege escalation. Typical enterprise server and cloud installations do not utilize this embedded system-on-chip power management driver, substantially limiting exposure. Systems are only affected if deployed on targeted ARM platforms actively operating concurrent display and camera interfaces.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-413 · Improper Resource Locking