CVE-2026-43072
Analyzed Analyzed - Analysis Complete
Linux Kernel IRQ Handling Flaw in VC4 Driver

Publication date: 2026-05-05

Last updated on: 2026-06-01

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: drm/vc4: platform_get_irq_byname() returns an int platform_get_irq_byname() will return a negative value if an error happens, so it should be checked and not just passed directly into devm_request_threaded_irq() hoping all will be ok.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-05-05
Last Modified
2026-06-01
Generated
2026-06-16
AI Q&A
2026-05-05
EPSS Evaluated
2026-06-15
NVD
CVE-2026-43072
EUVD
EUVD-2026-27376
Affected Vendors & Products
Showing 5 associated CPEs
Vendor Product Version / Range
linux linux_kernel From 6.13 (inc) to 6.18.24 (exc)
linux linux_kernel From 6.19 (inc) to 6.19.14 (exc)
linux linux_kernel From 7.0 (inc) to 7.0.1 (exc)
linux linux_kernel From 6.7 (inc) to 6.12.83 (exc)
linux linux_kernel From 5.15 (inc) to 6.6.136 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability is related to the Linux kernel's drm/vc4 component. The function platform_get_irq_byname() can return a negative value to indicate an error. However, this return value was not properly checked before being passed directly into devm_request_threaded_irq(). This improper handling could lead to unexpected behavior or errors in the kernel.

Impact Analysis

If the negative return value from platform_get_irq_byname() is not checked, it may cause devm_request_threaded_irq() to receive invalid input. This could result in kernel errors, instability, or crashes, potentially affecting system reliability.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-43072. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart