CVE-2026-74454: drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO size
Published Aug 15, 2026
·Updated
drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO size
Affected Software
2 affected componentsFixes available
Linux Linux kernel
Microsoft azl3 kernel 6.6.150.1-1<6.6.152.1-1
6.6.152.1-1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.152.1-1
Event History
Aug 15, 2026
CVE Published
via MITRE·12:26 PM
Data Sourced
via MITRE·12:26 PM
DescriptionSeverity
Data Sourced
via NVD·01:17 PM
DescriptionSeverity
Aug 23, 2026
Data Sourced
via Microsoft·09:42 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-74454?
The severity of CVE-2026-74454 is rated as 73.
2
How do I fix CVE-2026-74454?
To fix CVE-2026-74454, ensure you update to the latest Linux kernel version where this vulnerability has been addressed.
3
What systems are affected by CVE-2026-74454?
CVE-2026-74454 affects the Linux kernel specifically within the drm/vc4 driver.
4
What types of attacks could exploit CVE-2026-74454?
CVE-2026-74454 could potentially be exploited to cause out-of-memory errors leading to denial of service.
5
When was CVE-2026-74454 published?
CVE-2026-74454 was published on August 15, 2026.