CVE-2026-53056
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
24/06/2026
Last modified:
21/07/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
drm/msm/dpu: fix mismatch between power and frequency<br />
<br />
During DPU runtime suspend, calling dev_pm_opp_set_rate(dev, 0) drops<br />
the MMCX rail to MIN_SVS while the core clock frequency remains at its<br />
original (highest) rate. When runtime resume re-enables the clock, this<br />
may result in a mismatch between the rail voltage and the clock rate.<br />
<br />
For example, in the DPU bind path, the sequence could be:<br />
cpu0: dev_sync_state -> rpmhpd_sync_state<br />
cpu1: dpu_kms_hw_init<br />
timeline 0 ------------------------------------------------> t<br />
<br />
After rpmhpd_sync_state, the voltage performance is no longer guaranteed<br />
to stay at the highest level. During dpu_kms_hw_init, calling<br />
dev_pm_opp_set_rate(dev, 0) drops the voltage, causing the MMCX rail to<br />
fall to MIN_SVS while the core clock is still at its maximum frequency.<br />
When the power is re-enabled, only the clock is enabled, leading to a<br />
situation where the MMCX rail is at MIN_SVS but the core clock is at its<br />
highest rate. In this state, the rail cannot sustain the clock rate,<br />
which may cause instability or system crash.<br />
<br />
Remove the call to dev_pm_opp_set_rate(dev, 0) from dpu_runtime_suspend<br />
to ensure the correct vote is restored when DPU resumes.<br />
<br />
Patchwork: https://patchwork.freedesktop.org/patch/710077/
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.9 (including) | 6.1.175 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.2 (including) | 6.6.141 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.7 (including) | 6.12.91 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.13 (including) | 6.18.33 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.19 (including) | 7.0.10 (excluding) |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- https://git.kernel.org/stable/c/0ccf4f27b4652570b5de3de02a89a86435559de9
- https://git.kernel.org/stable/c/0f7dd5839cfabaf9c007fb718ec66e907a473c93
- https://git.kernel.org/stable/c/1181a7028d37e0b1e720a36125a03f5db97e3d27
- https://git.kernel.org/stable/c/9830999c9e065c1813ec5435bfe4eab98ee54a87
- https://git.kernel.org/stable/c/bc1dccc518cc5ab5140fba06c27e7188e0ed342b
- https://git.kernel.org/stable/c/c5735c7d0eef7a5240f9c1c66e44ba52a1be58d6



