SB2026060445 - Improper Check or Handling of Exceptional Conditions in Linux kernel drm panthor driver

Description

This security bulletin contains information about 1 vulnerability.

1) Improper Check or Handling of Exceptional Conditions (CVE-ID: CVE-2025-71314)

CWE-ID: CWE-703 - Improper Check or Handling of Exceptional Conditions

CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to improper handling of cache flush timeout conditions in panthor_gpu_flush_caches() when processing buggy GPU jobs created by the userspace driver. A local user can submit a malformed GPU job to cause a denial of service.

The issue can block the whole memory subsystem and prevent flush operations from completing.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/2c899c6026fc9d39286735b30c4d8550d4ea075b
• https://git.kernel.org/stable/c/3c0a60195b37af83bbbaf223cd3a78945bace49e
• https://git.kernel.org/stable/c/57753f2c64c033a21a7400b3a2192db1cd6c890e
• https://git.kernel.org/stable/c/8ec4f1b14a6147db07d6e51aa1d6bcc799649847