Linux Kernel Vulnerability in VC4 DRM Component

CVE-2026-43072

What is CVE-2026-43072?

A vulnerability exists in the Linux kernel's VC4 DRM component, specifically in how the function platform_get_irq_byname() handles errors. If an error occurs, this function can return a negative value, which must be checked before passing it directly to devm_request_threaded_irq(). Failing to do so could lead to undefined behavior or system instability, as the improper handling of IRQ requests can disrupt the expected operation of devices relying on this subsystem.

References