CVE-2026-43294

drm: renesas: rz-du: mipi_dsi: fix kernel panic when rebooting for some panels

CVE-2026-43294 is fixed in 12 products on 1 platform, first by DEBIAN-CVE-2026-43294, released May 15, 2026. It is not reported as exploited. Patch Radar priority: Routine.

Routine
CVSS
5.5
Moderate
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0016
4th percentile

In the Linux kernel, the following vulnerability has been resolved: drm: renesas: rz-du: mipi_dsi: fix kernel panic when rebooting for some panels Since commit 56de5e305d4b ("clk: renesas: r9a07g044: Add MSTOP for RZ/G2L") we may get the following kernel panic, for some panels, when rebooting: systemd-shutdown[1]: Rebooting. Call trace: ... do_serror+0x28/0x68 el1h_64_error_handler+0x34/0x50 el1h_64_error+0x6c/0x70 rzg2l_mipi_dsi_host_transfer+0x114/0x458 (P) mipi_dsi_device_transfer+0x44/0x58 mipi_dsi_dcs_set_display_off_multi+0x9c/0xc4 ili9881c_unprepare+0x38/0x88 drm_panel_unprepare+0xbc/0x108 This happens for panels that need to send MIPI-DSI commands in their unprepare() callback. Since the MIPI-DSI interface is stopped at that point, rzg2l_mipi_dsi_host_transfer() triggers the kernel panic. Fix by moving rzg2l_mipi_dsi_stop() to new callback function rzg2l_mipi_dsi_atomic_post_disable(). With this change we now have the correct power-down/stop sequence: systemd-shutdown[1]: Rebooting. rzg2l-mipi-dsi 10850000.dsi: rzg2l_mipi_dsi_atomic_disable(): entry ili9881c-dsi 10850000.dsi.0: ili9881c_unprepare(): entry rzg2l-mipi-dsi 10850000.dsi: rzg2l_mipi_dsi_atomic_post_disable(): entry reboot: Restarting system

Where it's fixed

ProductFixed inFixReleased
Linux
kernel-64kb · sles 15.7 6.4.0-150700.53.73.2 SUSE-SU-2026:3166-1 Jul 21, 2026
kernel-azure · sles 15.7 6.4.0-150700.53.73.2 SUSE-SU-2026:3166-1 Jul 21, 2026
kernel-default · sles 15.7 6.4.0-150700.53.73.2 SUSE-SU-2026:3166-1 Jul 21, 2026
kernel-default-base · sles 15.7 6.4.0-150700.53.73.2.150700.17.41.4 SUSE-SU-2026:3166-1 Jul 21, 2026
kernel-docs · sles 15.7 6.4.0-150700.53.73.1 SUSE-SU-2026:3166-1 Jul 21, 2026
kernel-livepatch-SLE15-SP7-RT_Update_18 · sles 15.7 1-150700.1.5.1 SUSE-SU-2026:3130-1 Jul 20, 2026
kernel-livepatch-SLE15-SP7_Update_19 · sles 15.7 1-150700.15.3.4 SUSE-SU-2026:3166-1 Jul 21, 2026
kernel-obs-build · sles 15.7 6.4.0-150700.53.73.2 SUSE-SU-2026:3166-1 Jul 21, 2026
kernel-source · sles 15.7 6.4.0-150700.53.73.1 SUSE-SU-2026:3166-1 Jul 21, 2026
kernel-syms · sles 15.7 6.4.0-150700.53.73.1 SUSE-SU-2026:3166-1 Jul 21, 2026
kernel-zfcpdump · sles 15.7 6.4.0-150700.53.73.2 SUSE-SU-2026:3166-1 Jul 21, 2026
linux · Debian 13.5 (trixie) 6.12.115-2 DEBIAN-CVE-2026-43294 May 15, 2026
linux · Debian 14 6.19.6-1 DEBIAN-CVE-2026-43294 May 15, 2026

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.