CVE-2025-40276: drm/panthor: Flush shmem writes before mapping buffers CPU-uncached

Severity: high (CVSS 7.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-12-06 · updated 2026-10-15

Description

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Flush shmem writes before mapping buffers CPU-uncached The shmem layer zeroes out the new pages using cached mappings, and if we don't CPU-flush we might leave dirty cachelines behind, leading to potential data leaks and/or asynchronous buffer corruption when dirty cachelines are evicted.

Affected products

Linux kernel: 6.10 — fixed in 6.18

How to fix

Upgrade to a fixed version: Linux kernel 6.18. Check the vendor advisory for mitigations.

References

https://git.kernel.org/stable/c/576c930e5e7dcb937648490611a83f1bf0171048
https://git.kernel.org/stable/c/7a12f9c96d06b145562f76ffb20369b4692f0911
https://git.kernel.org/stable/c/8355eea2a2e9c323021dfdcb95d7767d382123c4

Get alerted when CVE-2025-40276 or the next vulnerability affects your stack