Impact
The panthor DRM driver in the Linux kernel can experience situations where memory subsystem flushes never complete, blocking all memory operations. When this occurs the system becomes effectively hung, disabling GPU and memory functions until a reset is performed. The patched code implements a reset trigger, clears pending requests, and rejects additional flush requests with an error, preventing indefinite waits. The vulnerability thus allows a denial of service (DoS) impact where the victim can experience system instability, prolonged downtime, and inability to process GPU workloads.
Affected Systems
All Linux kernel releases that include the panthor DRM driver prior to the patch are affected. The exact version range is not specified in the provided data; therefore any kernel containing the vulnerable panthor implementation before the commit referenced in the advisories must be considered vulnerable. Users of recent stable kernel releases that have merged the patches are no longer affected.
Risk and Exploitability
The CVSS score and EPSS are not provided, but the vulnerability is a DoS that can be triggered by malformed or buggy GPU jobs created by the user‑mode driver (UMD). Attackers can induce the kernel to enter a hung state by submitting such GPU requests, causing the memory subsystem to block. No public exploits are listed and the incident is within the vendor’s known security updates, but the impact on system availability is significant. As KEV does not include this CVE, it is not yet listed as a known exploited vulnerability, yet monitoring is advised for kernel instabilities that may reflect underlying failures.
OpenCVE Enrichment