The Linux kernel flaw occurs when the MIPI DSI and CSI domains share control bits that govern clock and reset operations. If one domain disables the shared resource while the other still requires it, the affected interface may stop functioning, resulting in incorrect display or camera behavior. This is a resource‑management weakness identified as CWE‑413, leading to a denial of service on the DSI/CSI subsystems but no direct remote code execution or data exfiltration path.

The issue resides in the imx93‑blk‑ctrl driver within the Linux kernel. All installations that use the original pre‑patch code are potentially affected; the patch commits referenced in the advisory (4ba6d7166750d0b810c6cfc0b1df7585f513b48c, 4fd5b33faf092ef2d09f730a7d9e49f9e976ac67, 99611233f8cda833169fa6487d5dacdf189e5cb0) introduce a shared MIPI PHY power domain to prevent the conflict. No specific kernel release is enumerated, so any kernel code built against the affected driver implementation may be impacted.

The CVSS score of 7.8 indicates a high severity, but the EPSS score remains below 1% and there is no record in the CISA KEV catalog. The failure mode is confined to the kernel and hardware interaction; remote exploitation is not described. The resource‑management weakness identified as CWE‑413 leads to a denial of service on the DSI/CSI subsystems but no direct remote code execution or data exfiltration path. Based on the description, the likely attack vector is local or privileged, requiring the ability to load or configure the DSI and CSI interfaces. The risk is therefore moderate in environments where both interfaces are used simultaneously and a denial of service could be disruptive.