SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-72009

HIGH · CVSS 7.8 EPSS 0.16%

Source: NVD + CISA KEV + EPSS · Published 2026-08-15 · Last synced 2026-09-14

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's handling of shared control bits for the MIPI DSI and CSI domains, which can result in incorrect behavior if one domain disables resources while the other is still active. This mismanagement of shared resources could lead to system instability or malfunction in devices relying on these interfaces. Organizations utilizing Linux systems with MIPI DSI/CSI components should prioritize applying the fix to ensure proper operation and prevent potential disruptions.

CVE
CVE-2026-72009
Severity
HIGH
CVSS
7.8
EPSS
0.16%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx93-blk-ctrl: Extract PHY as shared domain for DSI/CSI The MIPI DSI and CSI domains share control bits for clock and reset, which can lead to incorrect behavior if one domain disables the shared resource while the other is still active. To fix the issue, introduce a shared MIPI PHY power domain to own the common resources and make DSI and CSI its subdomains. This ensures the shared bits are properly managed and not disabled while still in use.