CVE-2026-74452

Received Received - Intake

Heap Buffer Overflow in Linux Kernel DRM Panthor Driver

Publication date: 2026-08-15

Last updated on: 2026-08-17

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: reject firmware sections with oversized data In panthor_fw_load_section_entry(), the data size to copy is calculated without validating it against the allocated section_size: section->data.size = hdr.data.end - hdr.data.start; If a crafted firmware sets data.size larger than the allocated memory, this could cause a heap buffer overflow in panthor_fw_init_section_mem() memcpy(section->mem->kmap, section->data.buf, section->data.size); Additionally, if the section->data.size exceeds the BO size, could this memset underflow the size calculation, leading to a massive out-of-bounds zeroing of kernel memory? memset(section->mem->kmap + section->data.size, 0, panthor_kernel_bo_size(section->mem) - section->data.size); Reject section entries whose initial data is larger than the section size.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-15

Last Modified

2026-08-17

Generated

2026-09-04

AI Q&A

2026-08-15

EPSS Evaluated

2026-09-03

NVD

CVE-2026-74452

EUVD

EUVD-2026-59645

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a heap buffer overflow vulnerability in the Linux kernel's drm/panthor driver. It occurs when firmware sections have oversized data. The code calculates data size without checking against allocated memory, leading to potential overflows during memcpy or memset operations in panthor_fw_init_section_mem().

Detection Guidance

This vulnerability is specific to the Linux kernel's drm/panthor driver and relates to firmware handling. Detection requires checking kernel logs for panthor-related errors or examining firmware files for oversized sections. Commands like dmesg | grep panthor or inspecting firmware files with hex editors may help identify malformed sections.

Impact Analysis

This vulnerability could allow an attacker with access to craft malicious firmware to execute arbitrary code in the kernel, crash the system, or escalate privileges. It affects systems using the panthor GPU driver with untrusted firmware.

Compliance Impact

This vulnerability involves a heap buffer overflow and potential memory corruption in the Linux kernel's drm/panthor component due to improper validation of firmware section data sizes. While it does not directly impact GDPR or HIPAA compliance, such kernel vulnerabilities could lead to unauthorized memory access or data leaks, which may violate confidentiality requirements under these regulations if exploited.

Mitigation Strategies

Update your Linux kernel to the latest patched version. Avoid loading untrusted or modified firmware files. Monitor kernel logs for panthor-related errors. If using custom firmware, validate section sizes before loading.

Hi! I’m here to help you understand CVE-2026-74452. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70