CVE-2025-21843

drm/panthor: avoid garbage value in panthor_ioctl_dev_query()

Medium · published March 7, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
10.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm/panthor: avoid garbage value in panthor_ioctl_dev_query()

'priorities_info' is uninitialized, and the uninitialized value is copied

to user object when calling PANTHOR_UOBJ_SET(). Using memset to initialize

'priorities_info' to avoid this garbage value problem.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00210 · 10.6th percentile
Published
2025-03-07T09:10Z
EPSS history
Timeline
  • 07 MAR 09:10Z
    drm/panthor: avoid garbage value in panthor_ioctl_dev_query()
    cvelistv5