CVE-2026-74453

A flaw was found in the Linux kernel's drm/vc4 component. The graphics driver's binner buffer object (BO) reuses memory slots without properly clearing the Tile State Data Array (TSDA). This allows the hardware to process stale data from previous jobs, leading to the creation of invalid command streams and ultimately a Graphics Processing Unit (GPU) hang, resulting in a denial of service.

Red Hat rates this vulnerability as having a Moderate impact because exploitation requires local access to submit graphics jobs, restricting the potential consequence to a denial of service via GPU hang without affecting system confidentiality or integrity. Furthermore, standard Red Hat Enterprise Linux kernel packages do not enable or support the Broadcom VideoCore IV display driver, leaving enterprise installations unaffected under default configurations. Exploitation is constrained strictly to hardware platforms that utilize this specific driver.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.