CVE-2025-71307: drm/panthor: Fix NULL pointer dereference on panthor_fw_unplug
In the Linux kernel, the following vulnerability has been resolved:
drm/panthor: Fix NULL pointer dereference on panthorfwunplug
This patch removes the MCU halt and wait for halt procedures during panthorfwunplug() as the MCU can be in a variety of states or the FW may not even be loaded/initialized at all, the latter of which can lead to a NULL pointer dereference.
It should be safe on unplug to just disable the MCU without waiting for it to halt as it may not be able to.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-71307?
The severity of CVE-2025-71307 is medium with a CVSS score of 5.5.
How do I fix CVE-2025-71307?
To fix CVE-2025-71307, update your Linux kernel to the latest version where the vulnerability has been patched.
What software is affected by CVE-2025-71307?
CVE-2025-71307 affects the Linux kernel maintained by The Linux Foundation.
What is the nature of the vulnerability in CVE-2025-71307?
CVE-2025-71307 is a null pointer dereference vulnerability that occurs during the panthor_fw_unplug function.
When was CVE-2025-71307 published?
CVE-2025-71307 was published on May 27, 2026.