Impact
In the Linux kernel, the drm/panel-simple driver lacks a connector type for the DataImage SCF0700C48GGU18 panel. When the driver attempts to add the panel bridge, devm_drm_panel_bridge_add() checks for a valid connector type and, finding none, outputs a warning and backtrace. As a result, the panel is not added and the display fails to operate. This vulnerability does not provide code execution or privilege escalation; it merely prevents the panel from functioning and logs an error. The weakness is an instance of improper initialization, mapped to CWE‑665.
Affected Systems
The issue is confined to the drm/panel-simple driver in the Linux kernel. Any Linux distribution that ships a kernel version containing this driver, without the later patch, is affected when it uses the DataImage SCF0700C48GGU18 panel. No specific kernel version numbers are cited in the advisory, so all versions that include the unpatched driver are potentially vulnerable. Users who rely on that panel should verify whether their running kernel contains the recent commit adding the missing connector type.
Risk and Exploitability
The EPSS score is below 1 % and the vulnerability is not listed in the CISA KEV catalog, indicating a low probability of exploitation. Because the flaw only triggers a warning during driver initialization and requires the panel hardware to be present, it is unlikely to be exploitable for remote or malicious attacks. The absence of privilege escalation or data compromise further reduces the risk, resulting in a localized, low‑severity impact that mainly affects display availability.
OpenCVE Enrichment
Debian DLA
Debian DSA
Ubuntu USN