CVE-2025-71314 drm/panthor: Recover from panthor_gpu_flush_caches() failures
A bug in the Panthor GPU driver causes system hangs when cache flushes fail, requiring a patch to enable recovery and prevent denial of service.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-71314?
CVE-2025-71314 is a medium-severity denial of service vulnerability in Linux kernel, published on 3 Jun 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
drm/panthor: Recover from panthor_gpu_flush_caches() failures
We have seen a few cases where the whole memory subsystem is blocked and flush operations never complete. When that happens, we want to:
- schedule a reset, so we can recover from this situation - in the reset path, we need to reset the pending_reqs so we can send new commands after the reset - if more panthor_gpu_flush_caches() operations are queued after the timeout, we skip them and return -EIO directly to avoid needless waits (the memory block won't miraculously work again)
Note that we drop the WARN_ON()s because these hangs can be triggered with buggy GPU jobs created by the UMD, and there's no way we can prevent it. We do keep the error messages though.
v2: - New patch
v3: - Collect R-b - Explicitly mention the fact we dropped the WARN_ON()s in the commit message
v4: - No changes
Which versions are affected by CVE-2025-71314?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2025-71314?
Apply the vendor's patch.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2025-71314 being exploited?
There is no known exploitation of CVE-2025-71314 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as BELL-CVE-2025-71314, DEBIAN-CVE-2025-71314, GHSA-7rv6-jm8q-x9p7, UBUNTU-CVE-2025-71314.