CVE-2026-23049: drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel
In the Linux kernel, the following vulnerability has been resolved:
drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel
The connector type for the DataImage SCF0700C48GGU18 panel is missing and devmdrmpanelbridgeadd() requires connector type to be set. This leads to a warning and a backtrace in the kernel log and panel does not work: " WARNING: CPU: 3 PID: 38 at drivers/gpu/drm/bridge/panel.c:379 devmdrmofgetbridge+0xac/0xb8 " The warning is triggered by a check for valid connector type in devmdrmpanelbridgeadd(). If there is no valid connector type set for a panel, the warning is printed and panel is not added. Fill in the missing connector type to fix the warning and make the panel operational once again.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1 - Configuration
Set a valid connector type for the panel so devm_drm_panel_bridge_add() can add it and the panel becomes operational.
DataImage SCF0700C48GGU18 panel connector type
Event History
Frequently Asked Questions
Which deployments are affected in practice?
The issue is relevant to Linux kernel systems using the DataImage SCF0700C48GGU18 panel through the panel-simple DRM driver. The provided data does not identify other panel models as affected.
How can I tell whether a device is experiencing this issue?
The kernel log may contain a warning and backtrace referencing drivers/gpu/drm/bridge/panel.c:379 and devm_drm_of_get_bridge. The affected panel will not be added and will not operate.
Does the available information describe an attacker-driven exploitation path?
No. The provided information describes a missing connector-type configuration that causes a kernel warning and prevents the panel from working; it does not specify attacker access, privileges, or an exploitation method.