Medium 5.5Published May 5, 2026

CVE-2026-43072drm/vc4: platform_get_irq_byname() returns an int

Updated under an hour ago (Oct 26, 2026, 5:40 PM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: drm/vc4: platform_get_irq_byname() returns an int platform_get_irq_byname() will return a negative value if an error happens, so it should be checked and not just passed directly into devm_request_threaded_irq() hoping all will be ok.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Jun 14, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from f4790083c7c23b419f6a15170556950fd6a884a2 before 59ece0d4d1db0cf483c4c51a58691f50ff81d3a2; from f4790083c7c23b419f6a15170556950fd6a884a2 before 63c11b19cdc154fa848a6c3b535bfb1dc7b60378; from f4790083c7c23b419f6a15170556950fd6a884a2 before ef2ee9db13b68c5e332b77c0a7108a2d4d56e114; from f4790083c7c23b419f6a15170556950fd6a884a2 before 0185e0494a561edfc482507f9de89c2ad798b33d; from f4790083c7c23b419f6a15170556950fd6a884a2 before 9c10b83a004442c93d7a484c3d221a06a45821e1; from f4790083c7c23b419f6a15170556950fd6a884a2 before 0c1b117f7ba46fb8f6ebc5e0bfe5b58568c301ba; from f4790083c7c23b419f6a15170556950fd6a884a2 before e597a809a2b97e927060ba182f58eb3e6101bc70	CNA record
linux linux_kernel linux:linux_kernel	from 5.15 before 6.6.136; from 6.7 before 6.12.83; from 6.13 before 6.18.24; from 6.19 before 6.19.14; from 7.0 before 7.0.1	NVD

References

References

https://git.kernel.org/stable/c/59ece0d4d1db0cf483c4c51a58691f50ff81d3a2
https://git.kernel.org/stable/c/63c11b19cdc154fa848a6c3b535bfb1dc7b60378	patch
https://git.kernel.org/stable/c/ef2ee9db13b68c5e332b77c0a7108a2d4d56e114	patch
https://git.kernel.org/stable/c/0185e0494a561edfc482507f9de89c2ad798b33d	patch
https://git.kernel.org/stable/c/9c10b83a004442c93d7a484c3d221a06a45821e1	patch
https://git.kernel.org/stable/c/0c1b117f7ba46fb8f6ebc5e0bfe5b58568c301ba	patch
https://git.kernel.org/stable/c/e597a809a2b97e927060ba182f58eb3e6101bc70	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.