CVE-2026-68280

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the cdns-dsi bridge where the use of the deprecated UNIVERSAL DEV PM OPS() macro causes DSI clocks to be disabled twice: once during runtime suspend and again during system suspend. This sequence triggers a warning from the clock framework when it attempts to disable clocks that are already disabled. The issue occurs because the UNIVERSAL DEV PM OPS() macro applies the same callbacks to both runtime power management and system sleep, whereas the DRM framework is intended to manage system-wide power transitions via the bridge enable() and disable() hooks.

Recommendations Replace the UNIVERSAL DEV PM OPS() macro with RUNTIME PM OPS() to ensure bridge and panel drivers only handle runtime power management.