Buffer Overflow and Endianness Issues in Linux Kernel's TH1520 AON Firmware Driver

CVE-2026-31690

What is CVE-2026-31690?

A vulnerability in the Linux kernel's TH1520 AON firmware driver introduces potential buffer overflow issues stemming from unsafe pointer arithmetic. This could lead to unauthorized access or manipulation of the memory space. Additionally, the use of non-standard endian macros has been replaced with standard conversion macros, enhancing both the portability and maintainability of the driver. Testing has shown successful GPU power-up sequences, ensuring that the functionality remains intact while addressing these critical flaws.

References