CVE-2026-74380

Summary

In the Linux kernel, the following vulnerability has been resolved:

gpu: host1x: Fix iommu_map_sgtable() return value check

Commit "iommu: return full error code from iommu_map_sg_atomic" changed iommu_map_sgtable() to return an ssize_t and negative values in error cases, rather than a size_t and a zero.

pin_job() also was incorrectly assigning to 'int', which could cause overflows into negative values.

Update pin_job() to correctly check for errors from iommu_map_sgtable.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxad8f36e4b6b1c826a0daa5fda2c5839205b5aa8b < 5f3985c2a500df3126cb12a2e0ccf26a40bc495daffected
LinuxLinuxad8f36e4b6b1c826a0daa5fda2c5839205b5aa8b < 3ac173e46ef6fda9c9df8d47cdff4df962df9728affected
LinuxLinuxad8f36e4b6b1c826a0daa5fda2c5839205b5aa8b < 2a68928c445138961e2c451983b473aeb3f5b999affected
LinuxLinuxad8f36e4b6b1c826a0daa5fda2c5839205b5aa8b < 79240eee5a40014d9edfabe19f06b35ffa84e5f8affected
LinuxLinuxad8f36e4b6b1c826a0daa5fda2c5839205b5aa8b < e024c7993d839503d6c1f0044b8fc537c30300e9affected
LinuxLinuxad8f36e4b6b1c826a0daa5fda2c5839205b5aa8b < 18f74762013a4b6aa6f905c4459e0f506f9c5c7baffected
LinuxLinux5.15affected
LinuxLinux0 < 5.15unaffected
LinuxLinux6.1.178 <= 6.1.*unaffected
LinuxLinux6.6.145 <= 6.6.*unaffected
LinuxLinux6.12.97 <= 6.12.*unaffected
LinuxLinux6.18.40 <= 6.18.*unaffected
LinuxLinux7.1.5 <= 7.1.*unaffected
LinuxLinux7.2 <= *unaffected

Weaknesses

References