CVE-2026-89450

In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Reject a vSID wider than the SIDMATCH field tegra241vintfinitvsid programs the guest-provided vSID into SIDMATCH, whose VIRTSID field spans bits 20:1 with bit 0 as the match-enable flag. The HW therefore...

CVE-2026-89450

CVE-2026-89450 affects the Linux kernel's iommu/tegra241-cmdqv driver. The function tegra241_vintf_init_vsid() programs a guest-provided virtual Stream ID (vSID) into the SID_MATCH register, whose VIRT_SID field spans only bits [20:1]. However, the bound check rejects only values greater than UIN...