Riskcovery

CVE-2026-74451

drm/panthor: validate firmware interface structure sizes

State
Published
Severity
7.8 High
Published
Aug 15, 2026
Updated
Aug 17, 2026
Reserved
Aug 15, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/panthor: validate firmware interface structure sizes

iface_fw_to_cpu_addr() only checks that the firmware-provided MCU virtual address points inside the shared section. The returned pointer is later used as a full firmware interface structure, so accepting an address near the end of the shared section can still lead to out-of-bounds accesses.

Pass the expected object size to iface_fw_to_cpu_addr() and reject ranges that do not fit entirely in the shared section.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 2718d91816eeed03c09c8abe872e45f59078768c to before 21c77486f5a60bb9c0433c21de62a5f25d5091f1Affected
  • 2718d91816eeed03c09c8abe872e45f59078768c to before c835f2b0b7167584832b516c9b0a26e9180d1d0bAffected
  • 2718d91816eeed03c09c8abe872e45f59078768c to before ca41d9f3a21586bf29df53eec05152ecf2b2f94fAffected
  • 2718d91816eeed03c09c8abe872e45f59078768c to before b921b8613790a3f9e78ab64017fa7149ef0b750cAffected
LinuxLinux
  • 6.10Affected
  • before 6.10Not affected
  • 6.12.103 through 6.12.*Not affected
  • 6.18.44 through 6.18.*Not affected
  • 7.1.8 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.