CVE-2026-80883drm/tegra: gr2d/gr3d: Initialize address register map before HOST1X client is registered
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: drm/tegra: gr2d/gr3d: Initialize address register map before HOST1X client is registered The host1x_client_register() function is called just prior to register map initialization loop, making the device available to userspace. This may result in userspace attempting to submits a job before the register map is initialized. Address this by moving register initialization before host1x client registration.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Sep 7, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from d43f81cbaf43531a977e8b4c4427f19acf8a5061 before 6e22d5ad61cfa38aa53fab86a530113aff6a3619; from d43f81cbaf43531a977e8b4c4427f19acf8a5061 before 5db37fd7710e74bc4df48bddab8f571d0bfc6769; from d43f81cbaf43531a977e8b4c4427f19acf8a5061 before 40a2a91da02c434938f0ba53877984820800b5f0; from d43f81cbaf43531a977e8b4c4427f19acf8a5061 before 3055292b8eed69553b389a609197a241df47e68e; from d43f81cbaf43531a977e8b4c4427f19acf8a5061 before c4ef5ba1131346159e31f4ef858525cf377380a6 | CNA record |
References
- https://git.kernel.org/stable/c/6e22d5ad61cfa38aa53fab86a530113aff6a3619
- https://git.kernel.org/stable/c/5db37fd7710e74bc4df48bddab8f571d0bfc6769
- https://git.kernel.org/stable/c/40a2a91da02c434938f0ba53877984820800b5f0
- https://git.kernel.org/stable/c/3055292b8eed69553b389a609197a241df47e68e
- https://git.kernel.org/stable/c/c4ef5ba1131346159e31f4ef858525cf377380a6
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.