Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2025-71307

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix NULL pointer dereference on panthor_fw_unplug This patch removes the MCU halt and wait for halt procedures during panthor_fw_unplug() as the MCU can be in a variety of states or the FW may not even be loaded/initialized at all, the latter of which can lead to a NULL pointer dereference. It should be safe on unplug to just disable the MCU without waiting for it to halt as it may not be able to.
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:64570a886d7faf97dc3f52a3bb14fdd434926f94751ec93e95265505f262fa3c
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/gpu/drm/panthor/panthor_fw.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.19"},{"lessThan":"6.19","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.19.*","status":"unaffected","version":"6.19.4","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.0","versionType":"original_commit_for_fix"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d07cbc3184ecca108cc00d56289a0bb160e1082bf89ab7ff8f69495b0cea705c · sha256:dd1f6fa9a82c8bb5… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/gpu/drm/panthor/panthor_fw.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"aab8b8a42e206a399fe3a5ed4b4cbb45ff6c546c","status":"affected","version":"51407254986501b19681d55531963f1ea58e89cd","versionType":"git"},{"lessThan":"920c6af98e98e6afedf6318a75bac95af8415c6c","status":"affected","version":"51407254986501b19681d55531963f1ea58e89cd","versionType":"git"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d07cbc3184ecca108cc00d56289a0bb160e1082bf89ab7ff8f69495b0cea705c · sha256:dd1f6fa9a82c8bb5… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/gpu/drm/panthor/panthor_fw.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.19"},{"lessThan":"6.19","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.19.*","status":"unaffected","version":"6.19.4","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.0","versionType":"original_commit_for_fix"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d07cbc3184ecca108cc00d56289a0bb160e1082bf89ab7ff8f69495b0cea705c · sha256:dd1f6fa9a82c8bb5… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/gpu/drm/panthor/panthor_fw.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"aab8b8a42e206a399fe3a5ed4b4cbb45ff6c546c","status":"affected","version":"51407254986501b19681d55531963f1ea58e89cd","versionType":"git"},{"lessThan":"920c6af98e98e6afedf6318a75bac95af8415c6c","status":"affected","version":"51407254986501b19681d55531963f1ea58e89cd","versionType":"git"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d07cbc3184ecca108cc00d56289a0bb160e1082bf89ab7ff8f69495b0cea705c · sha256:dd1f6fa9a82c8bb5… · /containers/cna/affected/0

Source references

2 source assertions
{"url":"https://git.kernel.org/stable/c/920c6af98e98e6afedf6318a75bac95af8415c6c"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d07cbc3184ecca108cc00d56289a0bb160e1082bf89ab7ff8f69495b0cea705c · sha256:dd1f6fa9a82c8bb5… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/aab8b8a42e206a399fe3a5ed4b4cbb45ff6c546c"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d07cbc3184ecca108cc00d56289a0bb160e1082bf89ab7ff8f69495b0cea705c · sha256:dd1f6fa9a82c8bb5… · /containers/cna/references/0

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer