CVE-2026-74380
Published: August 18, 2026Last modified: August 18, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix iommu_map_sgtable() return value check Commit "iommu: return full error code from iommu_map_sg[_atomic]()" changed iommu_map_sgtable() to return an ssize_t and negative values in error cases, rather than a size_t and a zero. pin_job() also was incorrectly assigning to 'int', which could cause overflows into negative values. Update pin_job() to correctly check for errors from iommu_map_sgtable.
Severity score breakdown
| Parameter | Value |
|---|---|
| Base score | 8.8 |
| Attack Vector | LOCAL |
| Attack complexity | LOW |
| Privileges required | LOW |
| User interaction | NONE |
| Scope | CHANGED |
| Confidentiality | HIGH |
| Integrity impact | HIGH |
| Availability impact | HIGH |
| Vector | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H |
Status
| Product | Release | Package | Status |
|---|---|---|---|
| Alpaquita Linux | 23 LTS | linux-lts | Fixed (6.1.182-r0) |
| 25 LTS | linux-lts | Fixed (6.12.103-r0) | |
| Stream | linux-lts | Fixed (6.18.43-r0) |
References
- https://git.kernel.org/stable/c/18f74762013a4b6aa6f905c4459e0f506f9c5c7b
- https://git.kernel.org/stable/c/2a68928c445138961e2c451983b473aeb3f5b999
- https://git.kernel.org/stable/c/3ac173e46ef6fda9c9df8d47cdff4df962df9728
- https://git.kernel.org/stable/c/5f3985c2a500df3126cb12a2e0ccf26a40bc495d
- https://git.kernel.org/stable/c/79240eee5a40014d9edfabe19f06b35ffa84e5f8
- https://git.kernel.org/stable/c/e024c7993d839503d6c1f0044b8fc537c30300e9