PT-2026-37075 · Linux · Linux Kernel

Published 2026-05-05 · Updated 2026-05-29 · CVE-2026-43072

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the drm/vc4 component where the function platform get irq byname() returns an integer. This function can return a negative value when an error occurs; however, this value is passed directly into the devm request threaded irq() function without being checked first.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-43072

OPENSUSE-SU-2026:10793-1

Affected Products

Linux Kernel

References · 54

• https://security-tracker.debian.org/tracker/CVE-2026-43072 · Vendor Advisory
• https://git.kernel.org/stable/c/e597a809a2b97e927060ba182f58eb3e6101bc70 · Patch
• https://git.kernel.org/stable/c/63c11b19cdc154fa848a6c3b535bfb1dc7b60378 · Patch
• https://git.kernel.org/stable/c/0c1b117f7ba46fb8f6ebc5e0bfe5b58568c301ba · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-43072 · Security Note
• https://git.kernel.org/stable/c/ef2ee9db13b68c5e332b77c0a7108a2d4d56e114 · Patch
• https://osv.dev/vulnerability/openSUSE-SU-2026:10793-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-43072 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-43072 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-43072 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-43072 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43072 · Vendor Advisory
• https://git.kernel.org/stable/c/0185e0494a561edfc482507f9de89c2ad798b33d · Patch
• https://git.kernel.org/stable/c/9c10b83a004442c93d7a484c3d221a06a45821e1 · Patch
• https://git.kernel.org/linus/e597a809a2b97e927060ba182f58eb3e6101bc70 · Note