CVE-2026-72009CWE-362

CVE-2026-72009

High · published August 15, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
2.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

pmdomain: imx93-blk-ctrl: Extract PHY as shared domain for DSI/CSI

The MIPI DSI and CSI domains share control bits for clock and reset, which

can lead to incorrect behavior if one domain disables the shared resource

while the other is still active.

To fix the issue, introduce a shared MIPI PHY power domain to own the

common resources and make DSI and CSI its subdomains. This ensures the

shared bits are properly managed and not disabled while still in use.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00126 · 2.1th percentile
Weakness
CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Published
2026-08-15T10:20Z
References (4)
EPSS history
Timeline
  • 15 AUG 05:51Z
    pmdomain: imx93-blk-ctrl: Extract PHY as shared domain for DSI/CSI
    cvelistv5