CVE-2026-80577 PUBLISHED

drm/panthor: skip zero-sized firmware sections

Assigner: Linux
Reserved: 26.08.2026 Published: 26.08.2026 Updated: 26.08.2026

In the Linux kernel, the following vulnerability has been resolved:

drm/panthor: skip zero-sized firmware sections

panthor_fw_load_section_entry() skips BO creation when the firmware section VA range is empty. If such a section is added to the firmware section list, section->mem is left as NULL.

Later reload and unplug paths iterate over all firmware sections and dereference section->mem, which can lead to a NULL pointer dereference.

Zero-sized firmware sections are valid, so accept them as no-op entries but skip adding them to the section list.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 2718d91816eeed03c09c8abe872e45f59078768c to f0f3c3922db981031733a25c51e1f37cf9b9e251 (excl.)
  • affected from 2718d91816eeed03c09c8abe872e45f59078768c to 25556a46ae6ecf2a9f1c1c5096828eecd4596b91 (excl.)
  • affected from 2718d91816eeed03c09c8abe872e45f59078768c to 5d222b657f02a37f658e4e21925b85b4703855e7 (excl.)
  • affected from 2718d91816eeed03c09c8abe872e45f59078768c to 2b8f13d3c7e26c46c20d9e367904cf01729c88e6 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 6.10 is affected
  • unaffected from 0 to 6.10 (excl.)
  • unaffected from 6.12.105 to 6.12.* (incl.)
  • unaffected from 6.18.46 to 6.18.* (incl.)
  • unaffected from 7.1.10 to 7.1.* (incl.)
  • unaffected from 7.2 to * (incl.)

References