pmdomain: imx93-blk-ctrl: Extract PHY as shared domain for DSI/CSI (Linux Linux)
En bref
- Source
- NVD
- EPSS
- EPSS 0.13 % · centile 2 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- Linux
- Statut NVD
- Received
Rechercher sur…
Description
In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx93-blk-ctrl: Extract PHY as shared domain for DSI/CSI The MIPI DSI and CSI domains share control bits for clock and reset, which can lead to incorrect behavior if one domain disables the shared resource while the other is still active. To fix the issue, introduce a shared MIPI PHY power domain to own the common resources and make DSI and CSI its subdomains. This ensures the shared bits are properly managed and not disabled while still in use.
Faiblesses (CWE)
- CWE-362 — Situation de compétition
Références
- https://git.kernel.org/stable/c/73c0d6957811d7c138124107e1d31e8fb0133156
- https://git.kernel.org/stable/c/94b8a47f45f19c537964355fa539670631882b20
- https://git.kernel.org/stable/c/4fd5b33faf092ef2d09f730a7d9e49f9e976ac67
- https://git.kernel.org/stable/c/4ba6d7166750d0b810c6cfc0b1df7585f513b48c
- https://git.kernel.org/stable/c/99611233f8cda833169fa6487d5dacdf189e5cb0
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | HIGH 7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | Linux |
| CVSS 3.1 | HIGH 7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | NVD · 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Secondary) |
Références européennes
- ENISA EUVD · EUVD-2026-59108
- GCVE · GCVE-0-2026-72009
Avis du CERT-FR
- CERTFR-2026-AVI-1385 — Multiples vulnérabilités dans les produits VMware · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1333 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1286 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
Produits affectés
| Produit | Versions |
|---|---|
| Linux · Linux | affected e9aa77d413c903ba4cf7da3fe0b419cae5b97a81 < 73c0d6957811d7c138124107e1d31e8fb0133156 ; affected e9aa77d413c903ba4cf7da3fe0b419cae5b97a81 < 94b8a47f45f19c537964355fa539670631882b20 ; affected e9aa77d413c903ba4cf7da3fe0b419cae5b97a81 < 4fd5b33faf092ef2d09f730a7d9e49f9e976ac67 ; affected e9aa77d413c903ba4cf7da3fe0b419cae5b97a81 < 4ba6d7166750d0b810c6cfc0b1df7585f513b48c ; affected e9aa77d413c903ba4cf7da3fe0b419cae5b97a81 < 99611233f8cda833169fa6487d5dacdf189e5cb0 |
| Linux · Linux | affected 6.1 ; unaffected 0 < 6.1 ; unaffected 6.1.191 ≤ 6.1.* ; unaffected 6.12.114 ≤ 6.12.* ; unaffected 6.18.42 ≤ 6.18.* ; unaffected 7.1.5 ≤ 7.1.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |