CVE-2026-43072 drm/vc4: platform_get_irq_byname() returns an int
A missing error check in the Linux kernel DRM driver can lead to a null pointer dereference and system crash when IRQ retrieval fails.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-43072?
CVE-2026-43072 is a medium-severity vulnerability in Linux kernel, published on 5 May 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
drm/vc4: platform_get_irq_byname() returns an int
platform_get_irq_byname() will return a negative value if an error happens, so it should be checked and not just passed directly into devm_request_threaded_irq() hoping all will be ok.
Which versions are affected by CVE-2026-43072?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2026-43072?
Apply the vendor's patch.
Is CVE-2026-43072 being exploited?
There is no known exploitation of CVE-2026-43072 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as BELL-CVE-2026-43072, DEBIAN-CVE-2026-43072, GHSA-q99v-2gx4-wp9h, ROOT-OS-DEBIAN-11-CVE-2026-43072, ROOT-OS-DEBIAN-12-CVE-2026-43072, ROOT-OS-UBUNTU-2204-CVE-2026-43072 and 2 more.