CVE-2026-68280: drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
drm/bridge: cdns-dsi: Replace deprecated UNIVERSALDEVPMOPS()
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.150.1-1 - Configuration
In drivers/drm/bridge/cdns-dsi, replace the deprecated UNIVERSAL_DEV_PM_OPS() macro with the runtime PM approach using RUNTIME_PM_OPS() (so the bridge enable()/disable() hooks only handle runtime power management, not system sleep). This prevents attempting to disable already-disabled DSI clocks that triggers a WARNING from the clock framework.
Linux kernel DRM bridge driver: cdns-dsi PM operations macro (UNIVERSAL_DEV_PM_OPS) = Replace UNIVERSAL_DEV_PM_OPS() with runtime PM ops using RUNTIME_PM_OPS()
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68280?
CVE-2026-68280 has a severity rating of 10, indicating a critical vulnerability.
How do I fix CVE-2026-68280?
To fix CVE-2026-68280, update your Linux kernel to the latest version where the vulnerability has been addressed.
What systems are affected by CVE-2026-68280?
CVE-2026-68280 affects systems running vulnerable versions of the Linux kernel that utilize the deprecated UNIVERSAL_DEV_PM_OPS() macro.
What kind of vulnerability is CVE-2026-68280?
CVE-2026-68280 is a vulnerability related to power management in the Linux kernel's DSI bridge driver.
Is there a workaround for CVE-2026-68280?
No official workaround is recommended for CVE-2026-68280, so applying the kernel update is the best mitigation.