CVE-2026-74451: drm/panthor: validate firmware interface structure sizes
In the Linux kernel, the following vulnerability has been resolved:
drm/panthor: validate firmware interface structure sizes
ifacefwtocpuaddr() only checks that the firmware-provided MCU virtual address points inside the shared section. The returned pointer is later used as a full firmware interface structure, so accepting an address near the end of the shared section can still lead to out-of-bounds accesses.
Pass the expected object size to ifacefwtocpuaddr() and reject ranges that do not fit entirely in the shared section.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-74451?
The risk level of CVE-2026-74451 is categorized as 34.
How do I fix CVE-2026-74451?
To fix CVE-2026-74451, update your Linux kernel to the latest patched version as per official advisories.
What type of systems are affected by CVE-2026-74451?
CVE-2026-74451 affects systems running the Linux kernel with the drm/panthor driver.
What is the primary issue addressed by CVE-2026-74451?
CVE-2026-74451 addresses the validation of firmware interface structure sizes in the Linux kernel.
When was CVE-2026-74451 published?
CVE-2026-74451 was published on August 15, 2026.