CVE-2026-90362

CVE-2026-90362

published September 17, 2026

CVSS
—
EPSS
0%
Percentile
10.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm/msm/dsi: Drop dev_pm_opp_set_rate(0)

dev_pm_opp_set_rate(0) removes the vote specified in required-opps but

does not actually park the clock, making it run without the necessary

power backing. Drop the explicit call to it.

Every call site of ops->link_clk_disable() is followed by

pm_runtime_put(), so the power vote will be rescinded if deemed safe.

Patchwork: https://patchwork.freedesktop.org/patch/742783/

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00210 · 10.7th percentile
Published
2026-09-17T21:17Z
References (8)
https://git.kernel.org/stable/c/00008e6f544c2d480f920ab1e593a46cfb87cead · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/06b7ba206561619bb34116f49e0ef26b867ce3aa · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/27e181c185194baf5c1ef18bbff1fc3bc283ef21 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/393b43cc12c95f3d2762a06f799807313029032e · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/5c3e537db05021c93ea40a46bd0c50eee2f30f87 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/83bc4eab83ae5ab88d410148a2e73e09e6f21c04 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/bc1df05cccdb4f08aa42e736b54d265c6c11a45b · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/d3e8355a63cead3dedaa52f46cd1ee9796fdc7a8 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 19 SEP 03:55Z
    EPSS moved — → 0%
    epss
  • 17 SEP 16:09Z
    drm/msm/dsi: Drop dev_pm_opp_set_rate(0)
    cvelistv5