{
  "schema_version": "1.6.1",
  "id": "RPI-CVE-2026-74380",
  "modified": "2026-10-07T17:22:01Z",
  "upstream": [
    "CVE-2026-74380"
  ],
  "published": "2026-08-15T06:04:33Z",
  "summary": "gpu: host1x: Fix iommu_map_sgtable() return value check",
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ngpu: host1x: Fix iommu_map_sgtable() return value check\n\nCommit \"iommu: return full error code from iommu_map_sg[_atomic]()\"\nchanged iommu_map_sgtable() to return an ssize_t and negative values\nin error cases, rather than a size_t and a zero.\n\npin_job() also was incorrectly assigning to 'int', which could cause\noverflows into negative values.\n\nUpdate pin_job() to correctly check for errors from iommu_map_sgtable.",
  "affected": [
    {
      "package": {
        "ecosystem": "Raspberry Pi OS:12",
        "name": "linux"
      },
      "versions": [
        "1:6.1.47-1+rpt4"
      ],
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-image-6.1.0-rpi3-rpi-2712",
            "binary_version": "1:6.1.47-1+rpt4"
          },
          {
            "binary_name": "linux-image-6.1.0-rpi3-rpi-v6",
            "binary_version": "1:6.1.47-1+rpt4"
          },
          {
            "binary_name": "linux-image-6.1.0-rpi3-rpi-v7",
            "binary_version": "1:6.1.47-1+rpt4"
          },
          {
            "binary_name": "linux-image-6.1.0-rpi3-rpi-v7l",
            "binary_version": "1:6.1.47-1+rpt4"
          },
          {
            "binary_name": "linux-image-6.1.0-rpi3-rpi-v8",
            "binary_version": "1:6.1.47-1+rpt4"
          }
        ]
      },
      "database_specific": {
        "per_version": {
          "1:6.1.47-1+rpt4": {
            "linux_commit": "655fc658a15ae7a6f37103754adb39ba52a9a14e",
            "upstream_version": "6.1.47",
            "assessment": "commit ancestry (strak rule)",
            "upstream_fixed": "6.1.178",
            "compiled_filter": false
          }
        }
      }
    }
  ],
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-74380"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/5f3985c2a500df3126cb12a2e0ccf26a40bc495d"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/3ac173e46ef6fda9c9df8d47cdff4df962df9728"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/2a68928c445138961e2c451983b473aeb3f5b999"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/79240eee5a40014d9edfabe19f06b35ffa84e5f8"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/e024c7993d839503d6c1f0044b8fc537c30300e9"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/18f74762013a4b6aa6f905c4459e0f506f9c5c7b"
    }
  ],
  "database_specific": {
    "source": "https://git.kernel.org/pub/scm/linux/security/vulns.git",
    "upstream_modified": "2026-08-17T05:50:24Z"
  }
}