SEPTEMBER 20, 2026
Live Feed
Back to database
Case File

CVE-2026-80577

UNKNOWN · CVSS N/A EPSS 0.16%

Source: NVD + CISA KEV + EPSS · Published 2026-08-26 · Last synced 2026-09-20

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's handling of zero-sized firmware sections in the panthor driver, which can lead to a NULL pointer dereference during firmware reload and unplug operations. This flaw could potentially cause system crashes or instability in environments relying on the affected driver. Organizations using Linux systems with the panthor driver should prioritize addressing this issue to maintain system reliability and prevent unexpected downtime.

CVE
CVE-2026-80577
Severity
UNKNOWN
CVSS
N/A
EPSS
0.16%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: skip zero-sized firmware sections panthor_fw_load_section_entry() skips BO creation when the firmware section VA range is empty. If such a section is added to the firmware section list, section->mem is left as NULL. Later reload and unplug paths iterate over all firmware sections and dereference section->mem, which can lead to a NULL pointer dereference. Zero-sized firmware sections are valid, so accept them as no-op entries but skip adding them to the section list.