> CVE-2026-90425

« BACK_TO_HOME
PUBLISHED
2026-09-17 17:17
MODIFIED
2026-09-17 17:17
EPSS (Prob. Exploit)
0.17%
Top 93.7%
DATA SOURCES:
NVD 🔗 2026-09-17 FIRST EPSS 🔗 2026-10-18 OSV 🔗 2026-10-19

> DESCRIPTION

In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Require exactly one Stream ID for a vSID tegra241_vintf_init_vsid() maps a guest vSID to a single physical Stream ID taken from master->streams[0], and only warns when the device does not have exactly one stream. A device with several streams gets only its first one mapped, so a guest vSID invalidation cannot reach the others' ATC and IOTLB entries; a device with none makes master->streams a ZERO_SIZE_PTR, read out of bounds. Reject the mapping with -EOPNOTSUPP if master->num_streams is not one.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

iommu/tegra241-cmdqv: Require exactly one Stream ID for a vSID

AFFECTED PACKAGES:
Unknown / Unknown
Linux / Kernel

> HISTORIQUE DES MODIFICATIONS

Première apparition
17/09/2026 17:17
Source: NVD
Total des modifications: 0 Dernière mise à jour: 1 month ago

> REFERENCES

https://git.kernel.org/stable/c/0b139ec4641c7d4163d8e345c26cc630e24fa43b
https://git.kernel.org/stable/c/9b37afb2d34d99ec4f8db28134181b5a8ec9a4a5
https://git.kernel.org/stable/c/fb292bfc9be936dade7eef7ec5762de1201983d8
« BACK_TO_HOME