CVE-2025-40276
High
Description
In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Flush shmem writes before mapping buffers CPU-uncached The shmem layer zeroes out the new pages using cached mappings, and if we don't CPU-flush we might leave dirty cachelines behind, leading to potential data leaks and/or asynchronous buffer corruption when dirty cachelines are evicted.
SeverityHigh
CVSS7.3
Exploit probability—
Product
Linux
PublishedDec 6, 2025
First seenDec 6, 2025
How to fix
Update
- Linux Linux8355eea2a2e9c323021dfdcb95d7767d382123c4, 7a12f9c96d06b145562f76ffb20369b4692f0911, 576c930e5e7dcb937648490611a83f1bf0171048 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 8a1cc07578bf42d85f008316873d710ff684dd29 ≤ v < 8355eea2a2e9c323021dfdcb95d7767d382123c4, 8a1cc07578bf42d85f008316873d710ff684dd29 ≤ v < 7a12f9c96d06b145562f76ffb20369b4692f0911, 8a1cc07578bf42d85f008316873d710ff684dd29 ≤ v < 576c930e5e7dcb937648490611a83f1bf0171048, 6.10 | 8355eea2a2e9c323021dfdcb95d7767d382123c4, 7a12f9c96d06b145562f76ffb20369b4692f0911, 576c930e5e7dcb937648490611a83f1bf0171048 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.