CVE-2026-68280

drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()

State: Published
Severity: Not scored
Published: Aug 10, 2026
Updated: Aug 23, 2026
Reserved: Jul 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()

The deprecated UNIVERSAL_DEV_PM_OPS() macro uses the provided callbacks for both runtime PM and system sleep. This causes the DSI clocks to be disabled twice: once during runtime suspend and again during system suspend, resulting in a WARN message from the clock framework when attempting to disable already-disabled clocks.

[ 84.384540] clk:231:5 already disabled [ 84.388314] WARNING: CPU: 2 PID: 531 at /drivers/clk/clk.c:1181 clk_core_disable+0xa4/0xac ... [ 84.579183] Call trace: [ 84.581624] clk_core_disable+0xa4/0xac [ 84.585457] clk_disable+0x30/0x4c [ 84.588857] cdns_dsi_suspend+0x20/0x58 [cdns_dsi] [ 84.593651] pm_generic_suspend+0x2c/0x44 [ 84.597661] ti_sci_pd_suspend+0xbc/0x15c [ 84.601670] dpm_run_callback+0x8c/0x14c [ 84.605588] __device_suspend+0x1a0/0x56c [ 84.609594] dpm_suspend+0x17c/0x21c [ 84.613165] dpm_suspend_start+0xa0/0xa8 [ 84.617083] suspend_devices_and_enter+0x12c/0x634 [ 84.621872] pm_suspend+0x1fc/0x368

To address this issue, replace UNIVERSAL_DEV_PM_OPS() with RUNTIME_PM_OPS(). Bridge and panel drivers should only deal with runtime PM, as the DRM framework manages system-wide power transitions through the bridge enable() and disable() hooks.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	e19233955d9e9a9ae202723b9a38ef38e755b5c0 to before 1014b279264c0fc9f56324608754e36d33b7b5aeAffected e19233955d9e9a9ae202723b9a38ef38e755b5c0 to before c18d46d9830c29677be5213a067daafe1ac80e43Affected e19233955d9e9a9ae202723b9a38ef38e755b5c0 to before 347bc3a6a4d968c403d2292e5ad986294d919dfcAffected e19233955d9e9a9ae202723b9a38ef38e755b5c0 to before c0384d6872f4dc2701960048a0be1a12a8d2dc6eAffected e19233955d9e9a9ae202723b9a38ef38e755b5c0 to before 1f9c6b74e79639179e90ad0c0fbeae26e31e044bAffected e19233955d9e9a9ae202723b9a38ef38e755b5c0 to before 2d8b08844c0ecc6f2002fa68711e779aa18c8585Affected
LinuxLinux	4.18Affected before 4.18Not affected 6.1.184 through 6.1.Not affected 6.6.148 through 6.6.Not affected 6.12.101 through 6.12.Not affected 6.18.42 through 6.18.Not affected 7.1.6 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

e19233955d9e9a9ae202723b9a38ef38e755b5c0 to before 1014b279264c0fc9f56324608754e36d33b7b5aeAffected
e19233955d9e9a9ae202723b9a38ef38e755b5c0 to before c18d46d9830c29677be5213a067daafe1ac80e43Affected
e19233955d9e9a9ae202723b9a38ef38e755b5c0 to before 347bc3a6a4d968c403d2292e5ad986294d919dfcAffected
e19233955d9e9a9ae202723b9a38ef38e755b5c0 to before c0384d6872f4dc2701960048a0be1a12a8d2dc6eAffected
e19233955d9e9a9ae202723b9a38ef38e755b5c0 to before 1f9c6b74e79639179e90ad0c0fbeae26e31e044bAffected
e19233955d9e9a9ae202723b9a38ef38e755b5c0 to before 2d8b08844c0ecc6f2002fa68711e779aa18c8585Affected

LinuxLinux

4.18Affected
before 4.18Not affected
6.1.184 through 6.1.*Not affected
6.6.148 through 6.6.*Not affected
6.12.101 through 6.12.*Not affected
6.18.42 through 6.18.*Not affected
7.1.6 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.