What’s Vulnerable › Vulnerabilities

CVE-2026-74380: gpu: host1x: Fix iommu_map_sgtable() return value check

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-15 · updated 2026-10-16

Description

In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix iommu_map_sgtable() return value check Commit "iommu: return full error code from iommu_map_sg[_atomic]()" changed iommu_map_sgtable() to return an ssize_t and negative values in error cases, rather than a size_t and a zero. pin_job() also was incorrectly assigning to 'int', which could cause overflows into negative values. Update pin_job() to correctly check for errors from iommu_map_sgtable.

Affected products

• Linux kernel: 5.15 — fixed in 7.2

How to fix

Upgrade to a fixed version: Linux kernel 7.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/18f74762013a4b6aa6f905c4459e0f506f9c5c7b
• https://git.kernel.org/stable/c/2a68928c445138961e2c451983b473aeb3f5b999
• https://git.kernel.org/stable/c/3ac173e46ef6fda9c9df8d47cdff4df962df9728
• https://git.kernel.org/stable/c/5f3985c2a500df3126cb12a2e0ccf26a40bc495d
• https://git.kernel.org/stable/c/79240eee5a40014d9edfabe19f06b35ffa84e5f8
• https://git.kernel.org/stable/c/e024c7993d839503d6c1f0044b8fc537c30300e9

Get alerted when CVE-2026-74380 or the next vulnerability affects your stack