CVE-2026-74380 gpu: host1x: Fix iommu_map_sgtable() return value check
An integer overflow in the Linux kernel host1x driver can cause incorrect error handling, potentially leading to a denial of service.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-74380?
CVE-2026-74380 is a high-severity vulnerability in Linux, published on 15 Aug 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
gpu: host1x: Fix iommu_map_sgtable() return value check
Commit "iommu: return full error code from iommu_map_sg[_atomic]()" changed iommu_map_sgtable() to return an ssize_t and negative values in error cases, rather than a size_t and a zero.
pin_job() also was incorrectly assigning to 'int', which could cause overflows into negative values.
Update pin_job() to correctly check for errors from iommu_map_sgtable.
Which versions are affected by CVE-2026-74380?
How do I fix CVE-2026-74380?
Apply the vendor's patch.
Is CVE-2026-74380 being exploited?
There is no known exploitation of CVE-2026-74380 in the wild and no public exploit code.
Sources
Also known as BELL-CVE-2026-74380, DEBIAN-CVE-2026-74380, GHSA-jqc5-8mvc-pp3w, UBUNTU-CVE-2026-74380.