---
id: CVE-2026-72388
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  drm/panthor: Always use the IRQ-safe variant when acquiring the fence lock

  Since dma_fence objects can be shared with other subsystems, they may be
  accessed from hardi…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  drm/panthor: Always use the IRQ-safe variant when acquiring the fence lock

  Since dma_fence objects can be shared with other subsystems, they may be
  accessed from hardi…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= de85488138247d034eb3241840424a54d660926b <
    9de9e8f279de0c299631f530de66c51642eef50a
  - >-
    Linux >= de85488138247d034eb3241840424a54d660926b <
    2946aa6c97ac0e0d777baef8c0e6d944da8724a3
  - >-
    Linux >= de85488138247d034eb3241840424a54d660926b <
    778c57d624974e64535ef1c9d9b4d8e5066153f4
  - Linux 6.10
published: '2026-08-15'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T11:17:43.313'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-72388'
references:
  - url: 'https://git.kernel.org/stable/c/2946aa6c97ac0e0d777baef8c0e6d944da8724a3'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/778c57d624974e64535ef1c9d9b4d8e5066153f4'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/9de9e8f279de0c299631f530de66c51642eef50a'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
  - cve.org
epss: 0.00198
epssPercentile: 0.0888
ingestedAt: '2026-10-15T11:00:41.686Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

drm/panthor: Always use the IRQ-safe variant when acquiring the fence lock

Since dma_fence objects can be shared with other subsystems, they may be
accessed from hardirq context in those drivers, and we have to take
that into account by also using the IRQ-safe variant when acquiring
the lock.

While at it, switch to the guard model.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.