A flaw in the Linux kernel Panthor DRM driver allows authenticated local attackers to trigger memory corruption, posing a high security risk.

The vulnerability exists in the iface_fw_to_cpu_addr function of the Panthor DRM driver. It fails to properly validate the sizes of firmware interface structures, allowing an authenticated local user to potentially bypass memory bounds.

The vulnerability carries a CVSS score of 7.8, indicating high severity. Successful exploitation by a local attacker could lead to full system compromise, including unauthorized data access or a complete system crash, resulting in significant operational downtime for affected environments.

Immediate Action: Update the Linux kernel to version 6.12.103, 6.18.44, 7.1.8, or later, as these versions contain the necessary security patches.

Proactive Monitoring: Monitor system logs for kernel-related crashes or unexpected behavior in graphics-related drivers and services.

Compensating Controls: Restrict access to the system to trusted users only, as the vulnerability requires local access to the affected hardware/software stack.

Public Exploit Available: No (exploit_available: false)

Given the high CVSS severity, administrators should prioritize patching the Linux kernel on all systems utilizing the Panthor DRM driver. Updating to the specified stable versions is the only effective way to remediate this memory validation flaw.