CVE-2026-74451

Received Received - Intake

Linux Kernel Memory Corruption in drm/panthor

Publication date: 2026-08-15

Last updated on: 2026-08-17

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: validate firmware interface structure sizes iface_fw_to_cpu_addr() only checks that the firmware-provided MCU virtual address points inside the shared section. The returned pointer is later used as a full firmware interface structure, so accepting an address near the end of the shared section can still lead to out-of-bounds accesses. Pass the expected object size to iface_fw_to_cpu_addr() and reject ranges that do not fit entirely in the shared section.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-15

Last Modified

2026-08-17

Generated

2026-09-04

AI Q&A

2026-08-15

EPSS Evaluated

2026-09-03

NVD

CVE-2026-74451

EUVD

EUVD-2026-59644

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a Linux kernel vulnerability where a function called iface_fw_to_cpu_addr() does not properly validate the size of a firmware interface structure. It only checks if a firmware address is within a shared memory section but does not ensure the entire structure fits, leading to potential out-of-bounds memory access when the pointer is used.

Detection Guidance

This vulnerability is specific to the Linux kernel's drm/panthor driver and requires kernel-level inspection. Detection involves checking kernel logs for related errors or verifying the kernel version against patched releases. Commands like 'dmesg | grep panthor' or 'uname -a' may help identify affected systems.

Impact Analysis

This vulnerability could allow an attacker with local access to trigger memory corruption in the Linux kernel, potentially leading to system crashes, privilege escalation, or unauthorized access to sensitive data.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards. It is a low-level memory safety issue in the Linux kernel's DRM subsystem that could lead to out-of-bounds memory access. Compliance impacts would depend on whether such vulnerabilities are exploited to access or leak sensitive data, but no evidence suggests this specific flaw targets regulated data.

Mitigation Strategies

Update the Linux kernel to a version that includes the fix for CVE-2026-74451. Monitor vendor advisories for patches and apply them promptly. If immediate patching is not possible, consider disabling the drm/panthor driver if unused.

Hi! I’m here to help you understand CVE-2026-74451. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70