CVE-2026-74380
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
In the Linux kernel, the gpu: host1x driver has been fixed to correctly check the return value of iommu_map_sgtable(). The function now returns ssize_t with negative values on error, not size_t with zero. Additionally, pin_job() was incorrectly assigning to 'int', which could cause overflows into negative values.
Risk Assessment
Incorrect error checking may lead to unpredictable driver behavior, potentially causing system crashes or malfunction of graphics hardware.
Recommendation
It is recommended to update the Linux kernel to a version containing the fix for CVE-2026-74380.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix iommu_map_sgtable() return value check Commit "iommu: return full error code from iommu_map_sg[_atomic]()" changed iommu_map_sgtable() to return an ssize_t and negative values in error cases, rather than a size_t and a zero. pin_job() also was incorrectly assigning to 'int', which could cause overflows into negative values. Update pin_job() to correctly check for errors from iommu_map_sgtable.