CVE-2026-72388

Received Received - Intake

DRM Panthor Fence Lock IRQ-Safe Variant Use

Publication date: 2026-08-15

Last updated on: 2026-08-17

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Always use the IRQ-safe variant when acquiring the fence lock Since dma_fence objects can be shared with other subsystems, they may be accessed from hardirq context in those drivers, and we have to take that into account by also using the IRQ-safe variant when acquiring the lock. While at it, switch to the guard model.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-15

Last Modified

2026-08-17

Generated

2026-09-04

AI Q&A

2026-08-15

EPSS Evaluated

2026-09-03

NVD

CVE-2026-72388

EUVD

EUVD-2026-59287

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves improper handling of dma_fence objects which can be accessed from hardirq context. The issue is that the fence lock is not always acquired using an IRQ-safe variant, which could lead to race conditions or deadlocks when the lock is accessed in interrupt contexts.

Detection Guidance

This vulnerability is specific to the Linux kernel's drm/panthor driver and involves improper handling of fence locks in IRQ contexts. Detection requires kernel-level inspection rather than network commands. Check kernel logs for fence-related errors or warnings using 'dmesg | grep -i fence' or 'journalctl -k | grep -i fence'. Review the kernel version for affected releases and inspect the panthor driver code for lock acquisition patterns.

Impact Analysis

This vulnerability could cause system instability, crashes, or security issues if exploited. It may lead to kernel deadlocks or unexpected behavior when dma_fence objects are accessed in interrupt contexts, potentially affecting performance or causing denial-of-service conditions.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards. It is a Linux kernel issue related to IRQ-safe lock acquisition in the drm/panthor driver, which does not introduce data exposure or privacy risks that would impact regulatory compliance.

Mitigation Strategies

Update the Linux kernel to the latest patched version to resolve the vulnerability. No specific commands are provided in the context.

Hi! I’m here to help you understand CVE-2026-72388. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70