Linux Kernel Vulnerability in Panthor Driver

CVE-2025-21843

Summary

In the Linux kernel, a vulnerability exists within the Panthor driver that relates to uninitialized values being used when calling the PANTHOR_UOBJ_SET() function. Specifically, the 'priorities_info' variable is left uninitialized, which can lead to garbage values being copied into user objects. This flaw can undermine the stability and security of applications relying on this driver. To mitigate this issue, initializing 'priorities_info' using memset ensures that no uninitialized data is passed, thus enhancing the security and reliability of the user interaction with the kernel.

References