Menu

Star on GitHub · 3.2k

CVE-2026-43294

5.5 · MEDIUM

In the Linux kernel, the following vulnerability has been resolved: drm: renesas: rz-du: mipi_dsi: fix kernel panic when rebooting for some panels Since commit 56de5e305d4b ("clk: renesas: r9a07g…

Published May 8, 2026EPSS 0.16%

Overview

CVE-2026-43294 is a medium-severity vulnerability. It was published on May 8, 2026 and has a CVSS 3.1 base score of 5.5 (MEDIUM).

This vulnerability has a CVSS 3.1 base score of 5.5, rated MEDIUM. It requires local or adjacent network access to exploit. Some level of privileges is required for exploitation.

Technical description

In the Linux kernel, the following vulnerability has been resolved:

drm: renesas: rz-du: mipi_dsi: fix kernel panic when rebooting for some panels

Since commit 56de5e305d4b ("clk: renesas: r9a07g044: Add MSTOP for RZ/G2L")

we may get the following kernel panic, for some panels, when rebooting:

systemd-shutdown[1]: Rebooting.

Call trace:

...

do_serror+0x28/0x68

el1h_64_error_handler+0x34/0x50

el1h_64_error+0x6c/0x70

rzg2l_mipi_dsi_host_transfer+0x114/0x458 (P)

mipi_dsi_device_transfer+0x44/0x58

mipi_dsi_dcs_set_display_off_multi+0x9c/0xc4

ili9881c_unprepare+0x38/0x88

drm_panel_unprepare+0xbc/0x108

This happens for panels that need to send MIPI-DSI commands in their

unprepare() callback. Since the MIPI-DSI interface is stopped at that

point, rzg2l_mipi_dsi_host_transfer() triggers the kernel panic.

Fix by moving rzg2l_mipi_dsi_stop() to new callback function

rzg2l_mipi_dsi_atomic_post_disable().

With this change we now have the correct power-down/stop

Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Frequently asked questions

What is CVE-2026-43294?

CVE-2026-43294 is a medium-severity vulnerability. It was published on May 8, 2026 and has a CVSS 3.1 base score of 5.5 (MEDIUM).

How severe is CVE-2026-43294?

This vulnerability has a CVSS 3.1 base score of 5.5, rated MEDIUM. It requires local or adjacent network access to exploit. Some level of privileges is required for exploitation.

How do I fix or remediate CVE-2026-43294?

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

How can CyberStrike help with CVE-2026-43294?

CyberStrike is an open-source, AI-augmented pentesting engine. Rather than flag a version number, it tests whether an issue like CVE-2026-43294 is actually reachable in your own applications and APIs, then verifies each finding before reporting it. That tells you if the weakness is a real, exploitable risk in your environment or a false positive you can safely deprioritize.

Related MEDIUM CVEs from 2026

View all