CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel, specifically in the tegra241_cmdqv driver, where improper handling of memory allocation can lead to dereferencing a freed pointer. This flaw could potentially result in system instability or crashes if the fallback mechanism is triggered after a memory allocation failure. Organizations using affected Linux kernel versions, particularly those leveraging the tegra241 hardware, should prioritize addressing this issue to maintain system integrity and reliability.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Don't fall back to a freed smmu after devm_krealloc() __tegra241_cmdqv_probe() uses devm_krealloc() to grow @smmu into the larger tegra241_cmdqv, which frees the original @smmu once it relocates. A failure after that returned NULL, and the caller then dereferenced the freed @smmu on its fallback path. Return an int and take @smmu by reference instead, then update *smmu to the reallocated pointer after devm_krealloc() succeeds, so the caller and its fallback path both use the live @smmu rather than the freed original.