CVE-2024-53071: In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Be stricter about IO mapping flags Th
Summary
A vulnerability in the Linux kernel's panthor graphics driver allows userspace to make memory mappings writable after creation through mprotect(), and to create copy-on-write mappings that can cause system crashes. The issue occurs because the driver doesn't properly restrict VM_MAYWRITE (a flag controlling whether memory can be made writable later) and doesn't require VM_SHARED (a flag indicating shared memory semantics) when mapping GPU flush registers.
Solution / Mitigation
Clear the VM_MAYWRITE flag and require VM_SHARED when handling DRM_PANTHOR_USER_FLUSH_ID_MMIO_OFFSET mappings. The patch restricts both userspace's ability to change permissions via mprotect() and prevents unsupported copy-on-write semantics for this memory region.
Vulnerability Details
5.5(medium)
EPSS: 0.1%
Classification
Original source: https://nvd.nist.gov/vuln/detail/CVE-2024-53071
First tracked: February 15, 2026 at 08:35 PM
Classified by LLM (prompt v3) · confidence: 95%