CVE-2026-68280
NoneCVSS
—
EPSS
0.2%
Published
Aug 10, 2026
CISA due date
—
Cloudanix analysis
A coding shortcut in a display driver was causing harmless but noisy error messages every time the computer went to sleep.
- Exploitation
- Other
- Attacker needs
- None
- Complexity
- Theoretical
- Impact
- Other
- Component
- OS kernel
- Class
- Other
- Remediation
- Patch
- Effort
- Low
- Patch risk
- Low
What it actually does
Use of deprecated UNIVERSAL_DEV_PM_OPS() causes DSI clocks to be disabled twice (runtime suspend plus system suspend), triggering clk_core_disable warnings when clocks are already disabled.
Why it matters to the business
Produces spurious kernel warnings during system suspend on affected devices, increasing log noise and complicating diagnosis of real power-management problems without affecting core functionality.
How an attack unfolds
No remote or local attacker exploitation path exists; the issue is triggered automatically by the kernel power-management framework during normal suspend/resume cycles on systems using the cdns-dsi bridge driver.
How to fix it
Replace UNIVERSAL_DEV_PM_OPS() with RUNTIME_PM_OPS() in the cdns-dsi driver and rebuild the kernel; ensure DRM bridge/panel drivers rely only on runtime PM while the framework handles system transitions via enable/disable hooks.
How to confirm the fix worked
Confirm absence of the clk_core_disable warning during suspend after the change; verify the driver source no longer references UNIVERSAL_DEV_PM_OPS() and test suspend/resume cycles on cdns-dsi hardware.
How to detect it
Search kernel logs for the exact warning strings and call trace involving cdns_dsi_suspend and clk_core_disable; the condition occurs only on systems with the affected bridge during pm_suspend.
- clk:.* already disabled
- WARNING: CPU:.* at .*clk/clk.c.*clk_core_disable
- cdns_dsi_suspend
- clk_disable+0x30/0x4c
What your security team should do
- Apply the upstream fix to all kernels shipping the cdns-dsi driver
- Monitor kernel logs for the specific clk warning during routine suspend testing
- Prioritize updates on embedded or automotive systems using this bridge
The record
In the Linux kernel, the following vulnerability has been resolved: drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS() The deprecated UNIVERSAL_DEV_PM_OPS() macro uses the provided callbacks for both runtime PM and system sleep. This causes the DSI clocks to be disabled twice: once during runtime suspend and again during system suspend, resulting in a WARN message from the clock framework when attempting to disable already-disabled clocks. [ 84.384540] clk:231:5 already disabled [ 84.388314] WARNING: CPU: 2 PID: 531 at /drivers/clk/clk.c:1181 clk_core_disable+0xa4/0xac ... [ 84.579183] Call trace: [ 84.581624] clk_core_disable+0xa4/0xac [ 84.585457] clk_disable+0x30/0x4c [ 84.588857] cdns_dsi_suspend+0x20/0x58 [cdns_dsi] [ 84.593651] pm_generic_suspend+0x2c/0x44 [ 84.597661] ti_sci_pd_suspend+0xbc/0x15c [ 84.601670] dpm_run_callback+0x8c/0x14c [ 84.605588] __device_suspend+0x1a0/0x56c [ 84.609594] dpm_suspend+0x17c/0x21c [ 84.613165] dpm_suspend_start+0xa0/0xa8 [ 84.617083] suspend_devices_and_enter+0x12c/0x634 [ 84.621872] pm_suspend+0x1fc/0x368 To address this issue, replace UNIVERSAL_DEV_PM_OPS() with RUNTIME_PM_OPS(). Bridge and panel drivers should only deal with runtime PM, as the DRM framework manages system-wide power transitions through the bridge enable() and disable() hooks.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|