CVE-2026-80577
Received Received - Intake

NULL Pointer Dereference in Linux Kernel drm/panthor Driver

Publication date: 2026-08-26

Last updated on: 2026-08-26

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: drm/panthor: skip zero-sized firmware sections panthor_fw_load_section_entry() skips BO creation when the firmware section VA range is empty. If such a section is added to the firmware section list, section->mem is left as NULL. Later reload and unplug paths iterate over all firmware sections and dereference section->mem, which can lead to a NULL pointer dereference. Zero-sized firmware sections are valid, so accept them as no-op entries but skip adding them to the section list.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-26
Last Modified
2026-08-26
Generated
2026-08-26
AI Q&A
2026-08-26
EPSS Evaluated
N/A
NVD
CVE-2026-80577
EUVD
EUVD-2026-66492

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a NULL pointer dereference in the drm/panthor driver. When a zero-sized firmware section is added to the list, the section->mem pointer remains NULL. Later operations that iterate over firmware sections and dereference section->mem can crash the system due to this NULL pointer.

Detection Guidance

This vulnerability is specific to the Linux kernel's drm/panthor driver and involves firmware section handling. Detection requires checking kernel logs for NULL pointer dereference errors related to panthor_fw_load_section_entry() or firmware section processing. Examine kernel logs with commands like dmesg | grep panthor or journalctl -k | grep -i panthor.

Impact Analysis

This vulnerability can cause system crashes or instability when the affected Linux kernel component processes zero-sized firmware sections. Users relying on systems with the vulnerable kernel may experience unexpected failures or denial of service.

Mitigation Strategies

Update the Linux kernel to the latest stable version where this vulnerability is patched. If using a distribution kernel, apply available security updates immediately. Avoid manual workarounds as they may disrupt system stability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-80577. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart