Medium 5.5Published Jun 3, 2026

CVE-2025-71314drm/panthor: Recover from panthor_gpu_flush_caches() failures

Updated under an hour ago (Oct 28, 2026, 12:50 PM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Recover from panthor_gpu_flush_caches() failures We have seen a few cases where the whole memory subsystem is blocked and flush operations never complete. When that happens, we want to: - schedule a reset, so we can recover from this situation - in the reset path, we need to reset the pending_reqs so we can send new commands after the reset - if more panthor_gpu_flush_caches() operations are queued after the timeout, we skip them and return -EIO directly to avoid needless waits (the memory block won't miraculously work again) Note that we drop the WARN_ON()s because these hangs can be triggered with buggy GPU jobs created by the UMD, and there's no way we can prevent it. We do keep the error messages though. v2: - New patch v3: - Collect R-b - Explicitly mention the fact we dropped the WARN_ON()s in the commit message v4: - No changes

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: Jun 3, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 5cd894e258c4b0b92b9b475309cea244e590d194 before 8ec4f1b14a6147db07d6e51aa1d6bcc799649847; from 5cd894e258c4b0b92b9b475309cea244e590d194 before 57753f2c64c033a21a7400b3a2192db1cd6c890e; 5cd894e258c4b0b92b9b475309cea244e590d194 builds before 2c899c6026fc9d39286735b30c4d8550d4ea075b; 5cd894e258c4b0b92b9b475309cea244e590d194 builds before 3c0a60195b37af83bbbaf223cd3a78945bace49e	CNA record
linux linux_kernel linux:linux_kernel	from 6.10 before 6.12.75; from 6.13 before 6.18.14; from 6.19 before 6.19.4	NVD

References

References

https://git.kernel.org/stable/c/8ec4f1b14a6147db07d6e51aa1d6bcc799649847	patch
https://git.kernel.org/stable/c/57753f2c64c033a21a7400b3a2192db1cd6c890e	patch
https://git.kernel.org/stable/c/2c899c6026fc9d39286735b30c4d8550d4ea075b	patch
https://git.kernel.org/stable/c/3c0a60195b37af83bbbaf223cd3a78945bace49e	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.