CVE-2026-72387

Received Received - Intake

Linux Kernel Pointer Dereference in Panthor Driver

Publication date: 2026-08-15

Last updated on: 2026-08-17

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix potential invalid pointer deref in group_process_tiler_oom() If heaps is an ERR_PTR(), panthor_heap_pool_put() will deref an invalid pointer. Make sure we set it to NULL in that case.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-15

Last Modified

2026-08-17

Generated

2026-09-04

AI Q&A

2026-08-15

EPSS Evaluated

2026-09-03

NVD

CVE-2026-72387

EUVD

EUVD-2026-59286

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a Linux kernel vulnerability where a function in the drm/panthor driver fails to handle an error pointer correctly. If heaps is set to an error pointer (ERR_PTR), calling panthor_heap_pool_put() could lead to an invalid pointer dereference, causing a system crash or unexpected behavior.

Detection Guidance

This vulnerability is specific to the Linux kernel's drm/panthor driver and involves a potential invalid pointer dereference. Detection requires checking kernel logs for errors related to panthor_heap_pool_put() or group_process_tiler_oom(). Use commands like dmesg | grep panthor or journalctl -k | grep panthor to inspect kernel logs for relevant errors.

Impact Analysis

This vulnerability could cause system instability, crashes, or potential denial-of-service conditions if exploited. It may affect systems running affected Linux kernel versions with the drm/panthor driver enabled.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards as it involves a low-level kernel memory issue without clear implications for data protection or privacy.

Mitigation Strategies

Update your Linux kernel to the latest patched version to resolve this vulnerability. Monitor kernel logs for errors related to drm/panthor or panthor_heap_pool_put() dereferencing issues.

Hi! I’m here to help you understand CVE-2026-72387. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70