CVE-2026-72386

A flaw was found in the drm/panthor component of the Linux kernel. This vulnerability occurs when a group is evicted before the tiler Out-Of-Memory (OOM) service can process it, leading to a resource leak. An attacker could potentially exploit this to cause resource exhaustion, resulting in a Denial of Service (DoS).

A low severity resource leak was found in the drm/panthor driver in the Linux kernel. When a GPU group is evicted while its tiler out-of-memory (OOM) handling work is still pending, the group reference held by that pending work is not released, resulting in a kernel reference leak. A local attacker with access to the Panthor DRM device could repeatedly trigger tiler OOM events combined with group eviction to accumulate leaked references and exhaust kernel resources, resulting in a denial of service. The Red Hat CVSS 3.1 base score for this flaw is 5.5 (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H); however, Red Hat rates the overall impact as Low because exploiting it requires local access to the affected GPU device and the consequence is limited to availability loss through resource exhaustion, with no impact on confidentiality or integrity. All currently tracked Red Hat Enterprise Linux and Red Hat In-Vehicle OS kernel components are marked not affected for this flaw because the vulnerable code is not present in the shipped kernels.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.