Security tracker / CVE-2025-40276

CVE-2025-40276

drm/panthor: Flush shmem writes before mapping buffers CPU-uncached

References

• Debian security tracker
• cve.org

Notes

 carnil> Introduced in 8a1cc07578bf ("drm/panthor: Add GEM logical block"). Vulnerable
 carnil> versions: 6.10.

Bugs

Status

Branch	Status
upstream	released (6.18-rc6) [576c930e5e7dcb937648490611a83f1bf0171048]
6.18-upstream-stable	N/A "Fixed before branching point"
6.17-upstream-stable	released (6.17.9) [7a12f9c96d06b145562f76ffb20369b4692f0911]
6.12-upstream-stable	needed
6.6-upstream-stable	N/A "Vulnerable code not present"
6.1-upstream-stable	N/A "Vulnerable code not present"
5.10-upstream-stable	N/A "Vulnerable code not present"
sid	released (6.17.9-1)
6.12-trixie-security	needed
6.1-bookworm-security	N/A "Vulnerable code not present"
5.10-bullseye-security	N/A "Vulnerable code not present"