CVE-2026-72387

A flaw was found in the drm/panthor component of the Linux kernel. This vulnerability, located in the group_process_tiler_oom() function, occurs when error pointers are improperly handled, leading to an invalid memory dereference. A local attacker could potentially exploit this flaw to cause a system crash, resulting in a denial of service.

A moderate impact flaw was found in the drm/panthor driver in the Linux kernel. In the group_process_tiler_oom() function, when the heaps variable holds an ERR_PTR() value, it can be passed to panthor_heap_pool_put(), which then dereferences the invalid pointer. A local attacker able to trigger this code path could use this flaw to cause a system crash, resulting in a denial of service. Red Hat rated this flaw a CVSS 3.1 base score of 5.5 (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H), a Moderate impact. All currently assessed Red Hat Enterprise Linux and Red Hat In-Vehicle OS kernel, kernel-rt, and kernel-ivos-qualcomm update streams are not affected because the vulnerable code is not present in the shipped kernel builds.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.