The Linux kernel flaw occurs when the MIPI DSI and CSI domains share control bits that govern clock and reset operations. If one domain disables the shared resource while the other still requires it, the affected interface may stop functioning, resulting in incorrect display or camera behavior. The defect is a resource‑management weakness that can cause a denial of service on the DSI/CSI subsystems, but it does not provide a direct remote code execution or data exfiltration path.

The issue resides in the imx93‑blk‑ctrl driver within the Linux kernel. All installations that use the original pre‑fix code are potentially affected; the patch commits referenced in the advisory (4ba6d7166750d0b810c6cfc0b1df7585f513b48c, 4fd5b33faf092ef2d09f730a7d9e49f9e976ac67, 99611233f8cda833169fa6487d5dacdf189e5cb0) introduce a shared MIPI PHY power domain to prevent the conflict. No specific kernel release is enumerated, so any kernel code built against the affected driver implementation may be impacted.

The vulnerability does not carry a public CVSS or EPSS metric, and it is not listed in the CISA KEV catalog. The failure mode is confined to the kernel and hardware interaction; remote exploitation is not described. Based on the description, the likely attack vector is local or privileged, requiring the ability to load or configure the DSI and CSI interfaces. The risk is therefore moderate in environments where both interfaces are used simultaneously and a denial of service could be disruptive. The most effective defense is to apply the kernel patch that introduces the shared PHY domain.