Bug 2516642 (CVE-2026-72388)

Summary:	CVE-2026-72388 kernel: drm/panthor: Always use the IRQ-safe variant when acquiring the fence lock
Product:	[Other] Security Response	Reporter:	OSIDB Bzimport <bzimport>
Component:	vulnerability	Assignee:	Product Security DevOps Team <prodsec-dev>
Status:	NEW ---	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	rhel-process-autobot, watson-tool-maintainers
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	---
Doc Text:	A flaw was found in the Linux kernel's `drm/panthor` component. This vulnerability arises from the incorrect acquisition of fence locks, where an IRQ-safe variant was not consistently used for `dma_fence` objects. Since these objects can be accessed from hard interrupt (hardirq) context by other drivers, this improper locking could lead to race conditions. Such conditions may result in system instability or a denial of service.	Story Points:	---
Clone Of:		Environment:
Last Closed:		Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description OSIDB Bzimport 2026-08-15 06:23:30 UTC

In the Linux kernel, the following vulnerability has been resolved:

drm/panthor: Always use the IRQ-safe variant when acquiring the fence lock

Since dma_fence objects can be shared with other subsystems, they may be
accessed from hardirq context in those drivers, and we have to take
that into account by also using the IRQ-safe variant when acquiring
the lock.

While at it, switch to the guard model.

Comment 1 Keith Grant 2026-08-19 14:51:54 UTC

Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2026081519-CVE-2026-72388-99ea@gregkh/T