CVE-2026-90425iommu/tegra241-cmdqv: Require exactly one Stream ID for a vSID
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Require exactly one Stream ID for a vSID tegra241_vintf_init_vsid() maps a guest vSID to a single physical Stream ID taken from master->streams[0], and only warns when the device does not have exactly one stream. A device with several streams gets only its first one mapped, so a guest vSID invalidation cannot reach the others' ATC and IOTLB entries; a device with none makes master->streams a ZERO_SIZE_PTR, read out of bounds. Reject the mapping with -EOPNOTSUPP if master->num_streams is not one.
- CVSS
- 8.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 19, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 4dc0d12474f9d4833c3dd96b73d61e406d3f5dc7 before 9b37afb2d34d99ec4f8db28134181b5a8ec9a4a5; 4dc0d12474f9d4833c3dd96b73d61e406d3f5dc7 builds before 0b139ec4641c7d4163d8e345c26cc630e24fa43b; from 4dc0d12474f9d4833c3dd96b73d61e406d3f5dc7 before fb292bfc9be936dade7eef7ec5762de1201983d8 | CNA record |
References
- https://git.kernel.org/stable/c/9b37afb2d34d99ec4f8db28134181b5a8ec9a4a5
- https://git.kernel.org/stable/c/0b139ec4641c7d4163d8e345c26cc630e24fa43b
- https://git.kernel.org/stable/c/fb292bfc9be936dade7eef7ec5762de1201983d8
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.