CVE-2026-72388: drm/panthor: Always use the IRQ-safe variant when acquiring the fence lock
In the Linux kernel, the following vulnerability has been resolved:
drm/panthor: Always use the IRQ-safe variant when acquiring the fence lock
Since dmafence objects can be shared with other subsystems, they may be accessed from hardirq context in those drivers, and we have to take that into account by also using the IRQ-safe variant when acquiring the lock.
While at it, switch to the guard model.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Update drm/panthor code to always acquire the dma_fence fence lock using the IRQ-safe variant (i.e., use the IRQ-safe fence lock acquisition when the lock may be taken from hardirq context), consistent with the resolution: 'Always use the IRQ-safe variant when acquiring the fence lock' and 'also using the IRQ-safe variant when acquiring the lock'.
Linux kernel (dma_fence/drm/panthor) Use IRQ-safe fence lock acquisition variant = Always use the IRQ-safe variant when acquiring the fence lock