PT-2026-38936 · Linux · Linux Kernel

Published 2026-05-08 · Updated 2026-05-21 · CVE-2026-43294

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A kernel panic can occur during system reboot for certain panels. This issue happens when panels require the transmission of MIPI-DSI commands within their unprepare() callback. Because the MIPI-DSI interface is stopped at that stage, the rzg2l mipi dsi host transfer() function triggers the system crash.

Recommendations Update the Linux kernel to a version where the rzg2l mipi dsi stop() function has been moved to the rzg2l mipi dsi atomic post disable() callback to ensure the correct power-down and stop sequence.

Fix

Related Identifiers

CVE-2026-43294

Affected Products

Linux Kernel

References · 14

• https://osv.dev/vulnerability/UBUNTU-CVE-2026-43294 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-43294 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43294 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-43294 · Security Note
• https://git.kernel.org/stable/c/64aa8b3a60a825134f7d866adf05c024bbe0c24c · Patch
• https://osv.dev/vulnerability/BELL-CVE-2026-43294 · Vendor Advisory
• https://git.kernel.org/stable/c/79f42487ed60d0d5ffce97c3bb98f80c3d17735a · Patch
• https://git.kernel.org/stable/c/41cda667ffc5074c56279c632b0c20024da6ecdd · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-43294 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-43294 · Security Note
• https://twitter.com/hetmehtaa/status/2055151398283837677 · Twitter Post
• https://git.kernel.org/linus/64aa8b3a60a825134f7d866adf05c024bbe0c24c · Note
• https://docs.bell-sw.com/security/cves/CVE-2026-43294 · Note
• https://twitter.com/CVEnew/status/2053174651862335819 · Twitter Post