CVE-2026-74452

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the panthor fw load section entry() function where the data size to be copied is calculated without validation against the allocated section size. A crafted firmware could set data.size larger than the allocated memory, potentially leading to a heap buffer overflow during the execution of panthor fw init section mem() via the memcpy() function. Furthermore, if section->data.size exceeds the Buffer Object (BO) size, it could cause a size calculation underflow in the memset() function, resulting in extensive out-of-bounds zeroing of kernel memory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.