CVE-2026-72327

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the drm/v3d component where the v3d get cpu indirect csd params() function fails to verify the result of a buffer object lookup performed via drm gem object lookup(). When a user provides a bogus or stale handle, the lookup returns NULL, which is stored in info->indirect. This value is later dereferenced during the execution of the indirect CSD job, leading to a NULL pointer dereference in the kernel.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.