Medium 5.5Published May 8, 2026

CVE-2026-43294drm: renesas: rz-du: mipi_dsi: fix kernel panic when rebooting for some panels

Updated under an hour ago (Oct 26, 2026, 11:10 PM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: drm: renesas: rz-du: mipi_dsi: fix kernel panic when rebooting for some panels Since commit 56de5e305d4b ("clk: renesas: r9a07g044: Add MSTOP for RZ/G2L") we may get the following kernel panic, for some panels, when rebooting: systemd-shutdown[1]: Rebooting. Call trace: ... do_serror+0x28/0x68 el1h_64_error_handler+0x34/0x50 el1h_64_error+0x6c/0x70 rzg2l_mipi_dsi_host_transfer+0x114/0x458 (P) mipi_dsi_device_transfer+0x44/0x58 mipi_dsi_dcs_set_display_off_multi+0x9c/0xc4 ili9881c_unprepare+0x38/0x88 drm_panel_unprepare+0xbc/0x108 This happens for panels that need to send MIPI-DSI commands in their unprepare() callback. Since the MIPI-DSI interface is stopped at that point, rzg2l_mipi_dsi_host_transfer() triggers the kernel panic. Fix by moving rzg2l_mipi_dsi_stop() to new callback function rzg2l_mipi_dsi_atomic_post_disable(). With this change we now have the correct power-down/stop sequence: systemd-shutdown[1]: Rebooting. rzg2l-mipi-dsi 10850000.dsi: rzg2l_mipi_dsi_atomic_disable(): entry ili9881c-dsi 10850000.dsi.0: ili9881c_unprepare(): entry rzg2l-mipi-dsi 10850000.dsi: rzg2l_mipi_dsi_atomic_post_disable(): entry reboot: Restarting system

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 21, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	7a043f978ed1433bddb088a732e9bb91501ebd76 builds before 3cd7a71958c9f7f1def1a110e1ac98c022a554cd; from 7a043f978ed1433bddb088a732e9bb91501ebd76 before ad9a3246e76b83cd19eb07088111a743a9558bcd; from 7a043f978ed1433bddb088a732e9bb91501ebd76 before 79f42487ed60d0d5ffce97c3bb98f80c3d17735a; from 7a043f978ed1433bddb088a732e9bb91501ebd76 before 41cda667ffc5074c56279c632b0c20024da6ecdd; from 7a043f978ed1433bddb088a732e9bb91501ebd76 before 64aa8b3a60a825134f7d866adf05c024bbe0c24c	CNA record
linux linux_kernel linux:linux_kernel	from 6.2 before 6.18.16; from 6.19 before 6.19.6	NVD

References

References

https://git.kernel.org/stable/c/3cd7a71958c9f7f1def1a110e1ac98c022a554cd
https://git.kernel.org/stable/c/ad9a3246e76b83cd19eb07088111a743a9558bcd
https://git.kernel.org/stable/c/79f42487ed60d0d5ffce97c3bb98f80c3d17735a	patch
https://git.kernel.org/stable/c/41cda667ffc5074c56279c632b0c20024da6ecdd	patch
https://git.kernel.org/stable/c/64aa8b3a60a825134f7d866adf05c024bbe0c24c	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.