CVE-2026-90430

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists where tegra241 vintf init lvcmdq() stores a newly allocated vcmdq pointer in the vintf->lvcmdqs[] array before tegra241 vcmdq alloc smmu cmdq() finishes building the vcmdq->cmdq. If a latched LVCMDQ error occurs during this window, tegra241 vintf0 handle error() may pass a zeroed arm smmu cmdq to arm smmu cmdq skip err(), leading to the dereferencing of NULL queue register pointers.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.