CVE-2026-99003

A flaw was found in the Linux kernel's Panthor Direct Rendering Manager (DRM) driver. When the hardware firmware initializes fewer queue slots than the driver's hardcoded maximum, the driver fails to properly validate the requested queue count against the actual initialized firmware slots. A local unprivileged attacker could exploit this flaw by submitting a request with more queues than supported by the firmware, leading to an uninitialized memory dereference, a system crash, and a Denial of Service (DoS).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.