CVE-2026-72094

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A potential NULL pointer dereference exists in the dma-buf dma-fence component. The issue arises from a race condition on weakly ordered platforms where set and load operations regarding the fence's signaled-bit and the dma fence ops pointer can occur out of order. Specifically, the dma fence signal timestamp locked() function sets the signaled-bit before setting the ops pointer to NULL, while readers load the ops pointer before checking the signaled-bit. This can lead to a situation where a pointer is accessed after it has been set to NULL. The issue affects the dma fence timeline name() and dma fence driver name() functions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.