CVE-2026-80818

A flaw was found in the Linux kernel's iommu/tegra241-cmdqv driver. This vulnerability, a use-after-free, occurs when the system attempts to deinitialize a virtual interface during device teardown, accessing memory that has already been released. A local attacker or a malicious device could explo...

CVE-2026-90430

A flaw was found in the Linux kernel's iommu/tegra241-cmdqv component. A local attacker could potentially trigger a system crash, leading to a Denial of Service DoS. This occurs because a pointer to a command queue vcmdq is stored before it is fully initialized. If an error is encountered during...

CVE-2026-90428

A flaw was found in the Linux kernel's iommu/tegra241-cmdqv driver. This vulnerability occurs because the error interrupt is requested before a critical array is properly set up. If a Command Queue Virtualization CMDQV device has a pending error during a kernel restart kexec, the interrupt handle...

CVE-2026-90429

A flaw was found in the Linux kernel's iommu/tegra241-cmdqv component. A synchronization issue exists between the error Interrupt Service Routine ISR and the Virtual Interrupt Function VINTF de-initialization process. A concurrent error could lead to the ISR attempting to access a VINTF that is...

CVE-2026-90426

A flaw was found in the Linux kernel's iommu/tegra241-cmdqv component. During the teardown process of Virtual Interrupt Functions VINTFs, the error interrupt IRQ is freed after the VINTFs are torn down. This incorrect order can lead to a scenario where an error occurring in this window causes the...

CVE-2026-90427

A flaw was found in the Linux kernel's iommu/tegra241-cmdqv driver. During the tegra241cmdqvprobe function, a memory reallocation operation can free an existing memory region. If this reallocation fails, a subsequent fallback path attempts to access the previously freed memory. This...

CVE-2026-90424

A flaw was found in the Linux kernel, specifically within the iommu/tegra241-cmdqv driver. This vulnerability involves a resource leak during the initialization process of a component called VINTF0. If certain initialization steps fail, the VINTF0 resource is not properly released, leading to its...

SUSE CVE-2026-90425

In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Require exactly one Stream ID for a vSID tegra241vintfinitvsid maps a guest vSID to a single physical Stream ID taken from master-streams0, and only warns when the device does not have exactly one stream. A...

SUSE CVE-2026-90426

In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Free the error IRQ before tearing down VINTFs tegra241cmdqvremove tears each VINTF down first, then calls freeirq. Tearing a VINTF down frees vintf0 and clears cmdqv-vintfs0. An error in that window makes...

SUSE CVE-2026-90427

In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Don't fall back to a freed smmu after devmkrealloc tegra241cmdqvprobe uses devmkrealloc to grow @smmu into the larger tegra241cmdqv, which frees the original @smmu once it relocates. A failure after that...

SUSE CVE-2026-90429

In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Synchronize the error ISR against VINTF deinit A user VINTF is torn down by tegra241cmdqvdeinitvintf, which runs from the destroy callback and from the init-failure unwind in the alloc handler. It clears the...

SUSE CVE-2026-90424

In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Fix VINTF0 leak on the init-failure path tegra241cmdqvinitstructures allocates VINTF0 with kzallocobj, inits it, and preallocates its logical VCMDQs. Two of its error paths leak. When tegra241cmdqvinitvintf...

SUSE CVE-2026-90428

In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Don't run the error ISR before probe sets up vintfs tegra241cmdqvprobe requests the error IRQ before it has allocated the cmdqv-vintfs array and set cmdqv-numvintfs. A CMDQV left enabled with a latched error...

SUSE CVE-2026-90430

In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Publish an LVCMDQ only after it is fully initialized tegra241vintfinitlvcmdq stores the freshly allocated vcmdq pointer to the vintf-lvcmdqs array, before tegra241vcmdqallocsmmucmdq builds the vcmdq-cmdq. Th...

Linux Distros Unpatched Vulnerability : CVE-2026-90424

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Fix VINTF0 leak on the init-failure path tegra241cmdqvinitstructures...

Linux Distros Unpatched Vulnerability : CVE-2026-90429

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Synchronize the error ISR against VINTF deinit A user VINTF is torn do...

Linux Distros Unpatched Vulnerability : CVE-2026-90427

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iommu/tegra241-cmdqv: Don't fall back to a freed smmu after devmkrealloc tegra241cmdqvprobe uses devmkrealloc to grow @smmu into the larger tegra241cmdqv, which...

Linux Distros Unpatched Vulnerability : CVE-2026-90428

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Don't run the error ISR before probe sets up vintfs tegra241cmdqvprobe...

Linux Distros Unpatched Vulnerability : CVE-2026-90425

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Require exactly one Stream ID for a vSID tegra241vintfinitvsid maps a...

Linux Distros Unpatched Vulnerability : CVE-2026-90430

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Publish an LVCMDQ only after it is fully initialized...