CVE-2026-80577

A flaw was found in the Linux kernel's drm/panthor driver. When the panthorfwloadsectionentry function processes zero-sized firmware sections, it can leave a memory pointer uninitialized. Subsequent operations that attempt to access this uninitialized memory can lead to a null pointer dereference...

CVE-2026-80577

This vulnerability affects the Linux kernel DRM Panthor driver (Arm Mali GPU subsystem). The root cause is in panthor_fw_load_section_entry(): when a firmware section has an empty VA range , BO (Buffer Object) creation is skipped, leaving section->mem as NULL . Subsequent reload and unplug pat...

CVE-2026-80577 drm/panthor: skip zero-sized firmware sections

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: skip zero-sized firmware sections panthorfwloadsectionentry skips BO creation when the firmware section VA range is empty. If such a section is added to the firmware section list, section-mem is left as NULL. Later...

PT-2026-82193

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description A NULL pointer dereference exists in the drm/panthor component. The function panthor fw load section entry fails to handle zero-sized firmware sections correctly by skipping the creation...

CVE-2026-74451

A flaw was found in the drm/panthor component of the Linux kernel. The ifacefwtocpuaddr function, responsible for validating firmware interface structure sizes, does not adequately check if the firmware-provided Microcontroller Unit MCU virtual address fits entirely within the shared memory...

CVE-2026-74452

A flaw was found in the Linux kernel's drm/panthor component. This vulnerability allows a local attacker, by providing a specially crafted firmware, to cause a heap buffer overflow. This occurs because the data size to copy is not validated against the allocated section size, potentially leading ...

CVE-2026-72388

A flaw was found in the Linux kernel's drm/panthor component. This vulnerability arises from the incorrect acquisition of fence locks, where an IRQ-safe variant was not consistently used for dmafence objects. Since these objects can be accessed from hard interrupt hardirq context by other drivers...

CVE-2026-72386

A flaw was found in the drm/panthor component of the Linux kernel. This vulnerability occurs when a group is evicted before the tiler Out-Of-Memory OOM service can process it, leading to a resource leak. An attacker could potentially exploit this to cause resource exhaustion, resulting in a Denia...

CVE-2026-72387

A flaw was found in the drm/panthor component of the Linux kernel. This vulnerability, located in the groupprocesstileroom function, occurs when error pointers are improperly handled, leading to an invalid memory dereference. A local attacker could potentially exploit this flaw to cause a system...

Linux Distros Unpatched Vulnerability : CVE-2026-72387

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/panthor: Fix potential invalid pointer deref in groupprocesstileroom If heaps is an ERRPTR, panthorheappoolput will deref an invalid pointer. Make sure we s...

Linux Distros Unpatched Vulnerability : CVE-2026-72386

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/panthor: Fix a leak when a group is evicted before the tiler OOM is serviced A group ref is tied to the pending tileroomwork, so we need to release it if th...

SUSE CVE-2026-74451

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: validate firmware interface structure sizes ifacefwtocpuaddr only checks that the firmware-provided MCU virtual address points inside the shared section. The returned pointer is later used as a full firmware interfac...

SUSE CVE-2026-74452

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: reject firmware sections with oversized data In panthorfwloadsectionentry, the data size to copy is calculated without validating it against the allocated sectionsize: section-data.size = hdr.data.end - hdr.data.star...

CVE-2026-74451

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: validate firmware interface structure sizes ifacefwtocpuaddr only checks that the firmware-provided MCU virtual address points inside the shared section. The returned pointer is later used as a full firmware interfac...

CVE-2026-74452

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: reject firmware sections with oversized data In panthorfwloadsectionentry, the data size to copy is calculated without validating it against the allocated sectionsize: section-data.size = hdr.data.end - hdr.data.star...

CVE-2026-74451

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: validate firmware interface structure sizes ifacefwtocpuaddr only checks that the firmware-provided MCU virtual address points inside the shared section. The returned pointer is later used as a full firmware interfac...

CVE-2026-74452

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: reject firmware sections with oversized data In panthorfwloadsectionentry, the data size to copy is calculated without validating it against the allocated sectionsize: section-data.size = hdr.data.end - hdr.data.star...

UBUNTU-CVE-2026-74451

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: validate firmware interface structure sizes ifacefwtocpuaddr only checks that the firmware-provided MCU virtual address points inside the shared section. The returned pointer is later used as a full firmware interfac...

UBUNTU-CVE-2026-74452

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: reject firmware sections with oversized data In panthorfwloadsectionentry, the data size to copy is calculated without validating it against the allocated sectionsize: section-data.size = hdr.data.end - hdr.data.star...

CVE-2026-74452 drm/panthor: reject firmware sections with oversized data

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: reject firmware sections with oversized data In panthorfwloadsectionentry, the data size to copy is calculated without validating it against the allocated sectionsize: section-data.size = hdr.data.end - hdr.data.star...