CVE-2026-43072: drm/vc4: platform_get_irq_byname() returns an int
In the Linux kernel, the following vulnerability has been resolved:
drm/vc4: platformgetirqbyname() returns an int
platformgetirqbyname() will return a negative value if an error happens, so it should be checked and not just passed directly into devmrequestthreadedirq() hoping all will be ok.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Modify drm/vc4 driver code to check the return value of platform_get_irq_byname() for negative error codes and handle failures (return/error-path) instead of passing the raw integer directly into devm_request_threaded_irq().
Linux kernel (drm/vc4) platform_get_irq_byname return handling = check for negative error return and do not pass the raw return value into devm_request_threaded_irq()
Event History
Frequently Asked Questions
What is the severity of CVE-2026-43072?
CVE-2026-43072 is rated as a medium severity vulnerability in the Linux kernel affecting the drm/vc4 component.
How do I fix CVE-2026-43072?
To fix CVE-2026-43072, ensure that your Linux kernel is updated to the latest version where this vulnerability has been resolved.
What component is affected by CVE-2026-43072?
CVE-2026-43072 affects the drm/vc4 component of the Linux kernel.
What is the main issue in CVE-2026-43072?
The main issue in CVE-2026-43072 is that platform_get_irq_byname() does not properly check for error values, which can lead to unexpected behavior.
Who is impacted by CVE-2026-43072?
Users and developers who utilize the Linux kernel with the drm/vc4 component are impacted by CVE-2026-43072.