CVE-2025-71307CWE-476

CVE-2025-71307

Medium · published May 27, 2026

CVSS v3.1
5.5
EPSS
0%
Percentile
2.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm/panthor: Fix NULL pointer dereference on panthor_fw_unplug

This patch removes the MCU halt and wait for halt procedures during

panthor_fw_unplug() as the MCU can be in a variety of states or the FW

may not even be loaded/initialized at all, the latter of which can lead

to a NULL pointer dereference.

It should be safe on unplug to just disable the MCU without waiting for

it to halt as it may not be able to.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00138 · 2.9th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2026-05-27T18:16Z
Affected products (1)
ProductVersionsFixed in
linux/linux_kernel≥ 6.19, < 6.19.46.19.4
References (2)
https://git.kernel.org/stable/c/920c6af98e98e6afedf6318a75bac95af8415c6c · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/aab8b8a42e206a399fe3a5ed4b4cbb45ff6c546c · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 27 MAY 12:14Z
    drm/panthor: Fix NULL pointer dereference on panthor_fw_unplug
    cvelistv5