CVE-2026-90429 Linux CVE debrief

Who should care

Linux kernel developers and maintainers, Linux distribution vendors, and users of Linux-based systems should be aware of this vulnerability and take necessary actions to patch their systems. The vulnerability has a high CVSS score, indicating a high level of severity, and requires attention from Linux kernel developers, maintainers, and users.

Why it matters

The vulnerability in the Linux kernel's iommu/tegra241-cmdqv module requires attention from Linux kernel developers, maintainers, and users. The fix involves updating the Linux kernel to a version that includes the patch. The vulnerability has a high CVSS score, indicating a high level of severity.

• Potential NULL dereference or use-after-free in the error ISR
• Possible system crashes or instability
• Need for patching and updating Linux kernel versions

Technical summary

The vulnerability occurs in the iommu/tegra241-cmdqv module of the Linux kernel. The error ISR is not properly synchronized with VINTF (de)init, leading to potential NULL dereference or use-after-free. The fix involves publishing every slot with an smp_store_release() and reading each slot in the ISR with an smp_load_acquire() under a NULL check. This ensures that the ISR always sees a fully built vintf or NULL, preventing data corruption and potential system crashes. The patch also synchronizes_irq() prior to returning idx to the IDA, preventing vintf from being freed under a running handler.

Defensive priority

High

Recommended defensive actions

• Review and apply the patches provided by the Linux kernel maintainers
• Ensure that the Linux kernel is updated to a version that includes the fix
• Monitor system logs for potential exploitation attempts
• Perform a thorough review of the system for any signs of compromise
• Implement compensating controls for exposed systems while remediation is scheduled and verified
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Review relevant monitoring, detection, and logs for exposed assets that need extra review

Evidence notes

The CVE record and NVD vulnerability detail page provide information on the vulnerability, including its description, CVSS score, and references to source code changes. The Linux kernel patch notes and source code changes are available, detailing the fix for the iommu/tegra241-cmdqv vulnerability. The patch synchronizes the error ISR against VINTF (de)init, preventing NULL dereferences and use-after-free issues.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.