CVE-2026-72388

A flaw was found in the Linux kernel's drm/panthor component. This vulnerability arises from the incorrect acquisition of fence locks, where an IRQ-safe variant was not consistently used for dma_fence objects. Since these objects can be accessed from hard interrupt (hardirq) context by other drivers, this improper locking could lead to race conditions. Such conditions may result in system instability or a denial of service.

This vulnerability is rated as Moderate impact for Red Hat because exploitation requires authenticated local access and only results in system instability or denial of service rather than privilege escalation or data confidentiality loss. Red Hat Enterprise Linux is not affected as the Panthor graphics driver is not enabled or shipped in enterprise kernel packages. Furthermore, triggering the condition requires environments with supported Arm Mali GPU hardware along with concurrent fence sharing across kernel subsystems, greatly limiting the attack surface.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.