CVE-2025-40276: Linux

High severity, CVSS 7.3. EPSS: 0.1% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Flush shmem writes before mapping buffers CPU-uncached The shmem layer zeroes out the new pages using cached mappings, and if we don't CPU-flush we might leave dirty cachelines behind, leading to potential data leaks and/or asynchronous buffer corruption when dirty cachelines are evicted.

Affected products

• Linux Linux: from 6.10, before 6.12.64 (fixed in 6.12.64); from 6.13, before 6.17.9 (fixed in 6.17.9)

Published 2025-12-06. Last modified 2026-07-30.