CVE-2026-43294drm: renesas: rz-du: mipi_dsi: fix kernel panic when rebooting for some panels
- 5.5MediumCVSS base score
- 0.15%Exploitation in 30 daysEPSS · top 95% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
In the Linux kernel, the following vulnerability has been resolved: drm: renesas: rz-du: mipi_dsi: fix kernel panic when rebooting for some panels Since commit 56de5e305d4b ("clk: renesas: r9a07g044: Add MSTOP for RZ/G2L") we may get the following kernel panic, for some panels, when rebooting: systemd-shutdown[1]: Rebooting. Call trace: ... do_serror+0x28/0x68 el1h_64_error_handler+0x34/0x50 el1h_64_error+0x6c/0x70 rzg2l_mipi_dsi_host_transfer+0x114/0x458 (P) mipi_dsi_device_transfer+0x44/0x58 mipi_dsi_dcs_set_display_off_multi+0x9c/0xc4 ili9881c_unprepare+0x38/0x88 drm_panel_unprepare+0xbc/0x108 This happens for panels that need to send MIPI-DSI commands in their unprepare() callback. Since the MIPI-DSI interface is stopped at that point, rzg2l_mipi_dsi_host_transfer() triggers the kernel panic. Fix by moving rzg2l_mipi_dsi_stop() to new callback function rzg2l_mipi_dsi_atomic_post_disable(). With this change we now have the correct power-down/stop sequence: systemd-shutdown[1]: Rebooting. rzg2l-mipi-dsi 10850000.dsi: rzg2l_mipi_dsi_atomic_disable(): entry ili9881c-dsi 10850000.dsi.0: ili9881c_unprepare(): entry rzg2l-mipi-dsi 10850000.dsi: rzg2l_mipi_dsi_atomic_post_disable(): entry reboot: Restarting system
Timeline
ID reserved
By Linux
- 7 days later
· 7 days later
Published
- 6 months later
· 6 months later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Modified | 3.1 | Medium5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
- EPSS (exploitation in 30 days)
- 0.15% · top 95% of all CVEs (12 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.5.
Affected products
- affected 7a043f978ed1433bddb088a732e9bb91501ebd76 – < 3cd7a71958c9f7f1def1a110e1ac98c022a554cd
- affected 7a043f978ed1433bddb088a732e9bb91501ebd76 – < ad9a3246e76b83cd19eb07088111a743a9558bcd
- affected 7a043f978ed1433bddb088a732e9bb91501ebd76 – < 79f42487ed60d0d5ffce97c3bb98f80c3d17735a
- affected 7a043f978ed1433bddb088a732e9bb91501ebd76 – < 41cda667ffc5074c56279c632b0c20024da6ecdd
- affected 7a043f978ed1433bddb088a732e9bb91501ebd76 – < 64aa8b3a60a825134f7d866adf05c024bbe0c24c
- affected 6.2
- unaffected < 6.2
- unaffected 6.6.160 – ≤ 6.6.*
- unaffected 6.12.114 – ≤ 6.12.*
- unaffected 6.18.16 – ≤ 6.18.*
- unaffected 6.19.6 – ≤ 6.19.*
- unaffected 7.0 – ≤ *
References
References5
- https://git.kernel.org/stable/c/3cd7a71958c9f7f1def1a110e1ac98c022a554cd (opens in a new tab)
- https://git.kernel.org/stable/c/ad9a3246e76b83cd19eb07088111a743a9558bcd (opens in a new tab)
- https://git.kernel.org/stable/c/79f42487ed60d0d5ffce97c3bb98f80c3d17735a (opens in a new tab)
- https://git.kernel.org/stable/c/41cda667ffc5074c56279c632b0c20024da6ecdd (opens in a new tab)
- https://git.kernel.org/stable/c/64aa8b3a60a825134f7d866adf05c024bbe0c24c (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2026-28564 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2026-43294)Record last updated .