CVE-2026-74451

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the drm/panthor component where the iface fw to cpu addr() function only verifies that the MCU virtual address provided by the firmware points within the shared section. Because the resulting pointer is used as a complete firmware interface structure, an address located near the end of the shared section can result in out-of-bounds accesses.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.