Heap-based buffer overflow in Linux kernel - CVE-2026-74452

Vulnerability details

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to a heap-based buffer overflow in panthor_fw_load_section_entry() and panthor_fw_init_section_mem() when parsing a crafted firmware section entry with oversized initial data. A local user can supply a crafted firmware to trigger memory corruption and cause a denial of service.

An oversized section data value can also cause an underflow in the zeroing size calculation, potentially leading to out-of-bounds kernel memory zeroing.

Affected software

How to mitigate CVE-2026-74452

External References

• https://git.kernel.org/stable/c/0e57165ca025a67d8dfd17efd2765fdd4925fdab
• https://git.kernel.org/stable/c/2a761b9be5863e1d26a584f0c2d1e114a684ed9a
• https://git.kernel.org/stable/c/7f4674d986c15c74327cb6ac6e2e2afecf061e04
• https://git.kernel.org/stable/c/a3caaa06809248b996254be5b47e10804a3494e2

Related Security Bulletins

• Heap-based buffer overflow in Linux kernel drm panthor driver
• Debian update for linux