CVE-2026-90424

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak occurs in the tegra241 cmdqv init structures() function during the initialization failure path. The issue arises when tegra241 cmdqv init vintf() fails or during a subsequent VCMDQ preallocation failure. In the latter case, the system incorrectly identifies the ownership of VINTF0 because the hyp own flag is only set after a hardware read-back in tegra241 vintf hw init(). This leads to a leak and causes mutex destroy() and ida destroy() to be executed on uninitialized fields. The fix involves determining ownership based on the vintf->idx variable, where an index of 0 represents the kernel-owned VINTF0.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.