---
id: CVE-2026-90362
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  drm/msm/dsi: Drop dev_pm_opp_set_rate(0)

  dev_pm_opp_set_rate(0) removes the vote specified in required-opps but
  does not actually park the clock, making it run without…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  drm/msm/dsi: Drop dev_pm_opp_set_rate(0)

  dev_pm_opp_set_rate(0) removes the vote specified in required-opps but
  does not actually park the clock, making it run without…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 32d3e0feccfe2d07e73aaa322766ab04b3c9d594 <
    bc1df05cccdb4f08aa42e736b54d265c6c11a45b
  - >-
    Linux >= 32d3e0feccfe2d07e73aaa322766ab04b3c9d594 <
    27e181c185194baf5c1ef18bbff1fc3bc283ef21
  - >-
    Linux >= 32d3e0feccfe2d07e73aaa322766ab04b3c9d594 <
    5c3e537db05021c93ea40a46bd0c50eee2f30f87
  - >-
    Linux >= 32d3e0feccfe2d07e73aaa322766ab04b3c9d594 <
    d3e8355a63cead3dedaa52f46cd1ee9796fdc7a8
  - >-
    Linux >= 32d3e0feccfe2d07e73aaa322766ab04b3c9d594 <
    393b43cc12c95f3d2762a06f799807313029032e
  - >-
    Linux >= 32d3e0feccfe2d07e73aaa322766ab04b3c9d594 <
    83bc4eab83ae5ab88d410148a2e73e09e6f21c04
  - >-
    Linux >= 32d3e0feccfe2d07e73aaa322766ab04b3c9d594 <
    00008e6f544c2d480f920ab1e593a46cfb87cead
  - >-
    Linux >= 32d3e0feccfe2d07e73aaa322766ab04b3c9d594 <
    06b7ba206561619bb34116f49e0ef26b867ce3aa
  - Linux 5.9
published: '2026-09-17'
updated: '2026-09-17'
sourceUpdated: '2026-09-17T17:17:35.210'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-90362'
references:
  - url: 'https://git.kernel.org/stable/c/00008e6f544c2d480f920ab1e593a46cfb87cead'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/06b7ba206561619bb34116f49e0ef26b867ce3aa'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/27e181c185194baf5c1ef18bbff1fc3bc283ef21'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/393b43cc12c95f3d2762a06f799807313029032e'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/5c3e537db05021c93ea40a46bd0c50eee2f30f87'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/83bc4eab83ae5ab88d410148a2e73e09e6f21c04'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/bc1df05cccdb4f08aa42e736b54d265c6c11a45b'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/d3e8355a63cead3dedaa52f46cd1ee9796fdc7a8'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
  - cve.org
ingestedAt: '2026-09-17T16:21:47.811Z'
epss: 0.0021
epssPercentile: 0.11552
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

drm/msm/dsi: Drop dev_pm_opp_set_rate(0)

dev_pm_opp_set_rate(0) removes the vote specified in required-opps but
does not actually park the clock, making it run without the necessary
power backing. Drop the explicit call to it.

Every call site of ops->link_clk_disable() is followed by
pm_runtime_put(), so the power vote will be rescinded if deemed safe.

Patchwork: https://patchwork.freedesktop.org/patch/742783/

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.