CVE-2026-90362: drm/msm/dsi: Drop dev_pm_opp_set_rate(0)
In the Linux kernel, the following vulnerability has been resolved:
drm/msm/dsi: Drop devpmoppsetrate(0)
devpmoppsetrate(0) removes the vote specified in required-opps but does not actually park the clock, making it run without the necessary power backing. Drop the explicit call to it.
Every call site of ops->linkclkdisable() is followed by pmruntimeput(), so the power vote will be rescinded if deemed safe.
Patchwork: https://patchwork.freedesktop.org/patch/742783/
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Patch 742783
Event History
Frequently Asked Questions
Which systems are affected by this issue?
The issue is in the Linux kernel DRM MSM DSI code path. Systems using that display subsystem are the relevant scope; the provided data does not identify specific devices or kernel versions.
What condition causes the unsafe clock state?
It occurs when dev_pm_opp_set_rate(0) is called: that removes the required-opps power vote without actually parking the clock, allowing the clock to run without the necessary power backing.
What is the remediation described by the fix?
The fix removes the explicit dev_pm_opp_set_rate(0) call. The subsequent pm_runtime_put() after ops->link_clk_disable() rescinds the power vote when it is safe to do so.