CVE-2026-90425 in Linux
Riassunto
di MITRE • 17/09/2026
In the Linux kernel, the following vulnerability has been resolved:
iommu/tegra241-cmdqv: Require exactly one Stream ID for a vSID
tegra241_vintf_init_vsid() maps a guest vSID to a single physical Stream ID taken from master->streams[0], and only warns when the device does not have
exactly one stream. A device with several streams gets only its first one mapped, so a guest vSID invalidation cannot reach the others' ATC and IOTLB entries; a device with none makes master->streams a ZERO_SIZE_PTR, read out of bounds.
Reject the mapping with -EOPNOTSUPP if master->num_streams is not one.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.