CVE-2026-43072

Updated on 05 May 2026

Severity

5.5 Medium severity

Details

CVSS score
5.5

Overview

About vulnerability

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: platform_get_irq_byname() returns an int platform_get_irq_byname() will return a negative value if an error happens, so it should be checked and not just passed directly into devm_request_threaded_irq() hoping all will be ok. A flaw was found in the drm/vc4 component of the Linux kernel. The platform_get_irq_byname() function, which returns an integer that can indicate an error, was not properly validated before being passed to devm_request_threaded_irq(). This oversight in error handling could potentially lead to system instability or resource exhaustion, resulting in a denial of service (DoS).

Details

KernelCare state

Live-patch status from KernelCare for each operating system.

Operating system Status Covered kernels
Debian 12 Planned
Debian 13 Planned
Ubuntu 24.04 Planned