CVE-2026-80577

CVE-2026-80577

published August 26, 2026

CVSS
—
EPSS
0%
Percentile
10.4
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

drm/panthor: skip zero-sized firmware sections

panthor_fw_load_section_entry() skips BO creation when the firmware section

VA range is empty. If such a section is added to the firmware section list,

section->mem is left as NULL.

Later reload and unplug paths iterate over all firmware sections and

dereference section->mem, which can lead to a NULL pointer dereference.

Zero-sized firmware sections are valid, so accept them as no-op entries but

skip adding them to the section list.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00209 · 10.4th percentile
Published
2026-08-26T19:17Z
References (4)
EPSS history
Timeline
  • 28 AUG 06:54Z
    EPSS moved — → 0%
    epss
  • 26 AUG 14:37Z
    drm/panthor: skip zero-sized firmware sections
    cvelistv5