-

CVE-2026-90428

iommu/tegra241-cmdqv: Don't run the error ISR before probe sets up vintfs

In the Linux kernel, the following vulnerability has been resolved:

iommu/tegra241-cmdqv: Don't run the error ISR before probe sets up vintfs

__tegra241_cmdqv_probe() requests the error IRQ before it has allocated the
cmdqv->vintfs array and set cmdqv->num_vintfs. A CMDQV left enabled with a
latched error across a kexec fires the IRQ as soon as it is requested, and
tegra241_cmdqv_isr() then walks the uninitialized cmdqv->vintfs array.

Request the IRQ only after cmdqv->vintfs is allocated and zeroed, so that
a latched interrupt firing early runs the ISR against a valid array of NULL
slots that it safely skips.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 918eb5c856f6ce4cf93b4b38e4b5e156905c5943
Version < b1605a56745f22670205f6561df5771bbbb62a99
Status affected
Version 918eb5c856f6ce4cf93b4b38e4b5e156905c5943
Version < 2f627118b668659c6b195ac48beedb1bf8f53368
Status affected
Version 918eb5c856f6ce4cf93b4b38e4b5e156905c5943
Version < a168254ff8db08f2292be3d8fcbd37d2bb8c3d2d
Status affected
Version 918eb5c856f6ce4cf93b4b38e4b5e156905c5943
Version < 5acd67ceb38debe2fbf70ea35e2dec9f7ab01bbd
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.12
Status affected
Version 0
Version < 6.12
Status unaffected
Version <= 6.12.*
Version 6.12.110
Status unaffected
Version <= 6.18.*
Version 6.18.52
Status unaffected
Version <= 7.2.*
Version 7.2.6
Status unaffected
Version <= *
Version 7.3-rc1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.17% 0.065
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/b1605a56745f22670205f6561df5771bbbb62a99
https://git.kernel.org/stable/c/2f627118b668659c6b195ac48beedb1bf8f53368
https://git.kernel.org/stable/c/a168254ff8db08f2292be3d8fcbd37d2bb8c3d2d
https://git.kernel.org/stable/c/5acd67ceb38debe2fbf70ea35e2dec9f7ab01bbd