OCTOBER 12, 2026
Live Feed
Back to database
Case File

CVE-2026-90425

HIGH · CVSS 8.8 EPSS 0.17%

Source: NVD + CISA KEV + EPSS · Published 2026-09-17 · Last synced 2026-10-12

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's handling of virtual Stream IDs (vSIDs) in the iommu/tegra241-cmdqv module, where improper mapping can lead to read-out-of-bounds errors when devices have multiple streams or none at all. This can potentially allow unauthorized access to memory and impact system stability. Organizations using affected Linux kernel versions, particularly those leveraging the Tegra241 architecture, should prioritize patching to mitigate risks associated with this vulnerability.

CVE
CVE-2026-90425
Severity
HIGH
CVSS
8.8
EPSS
0.17%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Require exactly one Stream ID for a vSID tegra241_vintf_init_vsid() maps a guest vSID to a single physical Stream ID taken from master->streams[0], and only warns when the device does not have exactly one stream. A device with several streams gets only its first one mapped, so a guest vSID invalidation cannot reach the others' ATC and IOTLB entries; a device with none makes master->streams a ZERO_SIZE_PTR, read out of bounds. Reject the mapping with -EOPNOTSUPP if master->num_streams is not one.