CVE-2025-40276

In the Linux kernel, the following vulnerability has been resolved:

drm/panthor: Flush shmem writes before mapping buffers CPU-uncached

The shmem layer zeroes out the new pages using cached mappings, and if we don't CPU-flush we might leave dirty cachelines behind, leading to potential data leaks and/or asynchronous buffer corruption when dirty cachelines are evicted.

Red Hat products are not impacted by this vulnerability because the Panthor Direct Rendering Manager driver is not built or shipped in supported Red Hat Enterprise Linux releases. This flaw involves improper CPU cache flushing during shared memory allocation on systems with Arm Mali graphics hardware, which could theoretically permit local data exposure or memory corruption. Since the vulnerable driver code was added in upstream kernel version 6.10 and is absent from supported distributions, no exposure exists.