Linux Distros Unpatched Vulnerability : CVE-2026-90429

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iommu/tegra241-cmdqv: Synchronize the error ISR against VINTF deinit A user VINTF is torn down by tegra241cmdqvdeinitvintf, which runs from the destroy callback...

CVE-2026-90426

CVE-2026-90426 affects the Linux kernel 's tegra241-cmdqv IOMMU driver. In tegra241_cmdqv_remove(), VINTFs are torn down before the error IRQ is freed, creating a window where the ISR can read a stale cmdqv->vintfs[0] slot and pass a NULL or freed pointer to tegra241_vintf0_handle_error(), cau...