The vulnerability of the `panthor_gem_create_with_handle()` function in the `drivers/gpu/drm/panthor/panthor_gem.c` file of the Panthor driver (which provides DRM support for ARM Mali CSF-based graphics processors) in the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of protected information.

🗓️ 22 Jul 2026 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 2 Views

Panthor gem_create_with_handle vulnerability causes buffer overflow, risking confidentiality.

Reporter	Title	Published	Views	Family All 151
AstraLinux	Astra Linux – Vulnerability in Linux 6.12	24 Jun 202615:11	–	astralinux
Circl	CVE-2025-40276	6 Dec 202523:19	–	circl
CNNVD	Linux kernel 安全漏洞	6 Dec 202500:00	–	cnnvd
CVE	CVE-2025-40276	6 Dec 202521:50	–	cve
Cvelist	CVE-2025-40276 drm/panthor: Flush shmem writes before mapping buffers CPU-uncached	6 Dec 202521:50	–	cvelist
Debian	[SECURITY] [DSA 6126-1] linux security update	9 Feb 202618:21	–	debian
Debian CVE	CVE-2025-40276	6 Dec 202521:50	–	debiancve
Tenable Nessus	Debian dsa-6126 : ata-modules-6.12.31-armmp-di - security update	9 Feb 202600:00	–	nessus
Tenable Nessus	openSUSE 16 Security Update : kernel (openSUSE-SU-2026:20145-1)	4 Feb 202600:00	–	nessus
Tenable Nessus	Photon OS 5.0: Linux PHSA-2026-5.0-0842	9 May 202600:00	–	nessus

Source	Link
cve	www.cve.org/CVERecord
git	www.git.kernel.org/stable/c/7a12f9c96d06b145562f76ffb20369b4692f0911
git	www.git.kernel.org/linus/576c930e5e7dcb937648490611a83f1bf0171048
kernel	www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.17.9
lore	www.lore.kernel.org/linux-cve-announce/2025120717-CVE-2025-40276-6558@gregkh/
security-tracker	www.security-tracker.debian.org/tracker/CVE-2025-40276
web	www.web.nvd.nist.gov/view/vuln/detail

22 Jul 2026 00:00Current

5.7Medium risk

Vulners AI Score5.7

CVSS 27.7

CVSS 38

EPSS0.00161

panthor gem buffer overflow drm panthor