CVE-2026-74380

Received Received - Intake

Host1x GPU Driver IOMMU Mapping Error Fix

Publication date: 2026-08-15

Last updated on: 2026-08-17

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix iommu_map_sgtable() return value check Commit "iommu: return full error code from iommu_map_sg[_atomic]()" changed iommu_map_sgtable() to return an ssize_t and negative values in error cases, rather than a size_t and a zero. pin_job() also was incorrectly assigning to 'int', which could cause overflows into negative values. Update pin_job() to correctly check for errors from iommu_map_sgtable.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-15

Last Modified

2026-08-17

Generated

2026-09-04

AI Q&A

2026-08-15

EPSS Evaluated

2026-09-03

NVD

CVE-2026-74380

EUVD

EUVD-2026-59527

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves incorrect error handling in the host1x GPU driver. The function iommu_map_sgtable() was changed to return a signed integer (ssize_t) with negative values for errors instead of an unsigned size_t with zero for success. The pin_job() function incorrectly assigned this return value to an int, which could lead to overflows and improper error detection.

Detection Guidance

This vulnerability is specific to the Linux kernel's GPU host1x driver and involves incorrect error handling in iommu_map_sgtable(). Detection requires checking kernel logs for related errors or kernel crashes involving the host1x driver. Commands like dmesg | grep host1x or journalctl -k | grep host1x may help identify issues.

Impact Analysis

This vulnerability could cause the system to mishandle GPU memory mappings, potentially leading to crashes, data corruption, or security issues if malicious code exploits the incorrect error handling to bypass security checks.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards. It is a Linux kernel issue related to GPU memory mapping and error handling, which does not involve data privacy, security controls, or protected health information.

Mitigation Strategies

Apply the latest kernel update that includes the fix for this vulnerability. If immediate patching is not possible, consider disabling the affected GPU host1x driver if not required, but this may impact graphics functionality.

Hi! I’m here to help you understand CVE-2026-74380. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70